JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3

General

Target
JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3
Size 794KB
Sample241222-cd2vtaymcv
SHA256 db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3
MD5 efd086526dfe4c4f996223a0eeda211a
SHA1 4a24572a3f4d71c2600e5b8ea8b8de9c4550da28
SHA512 4c0fd8feaf2775f9581ac3a2577b0e988284f44f8c26fe7bd2f1604cfc636bec1f17def1110eba7f5c2b548e4b4baa1bc6619738d1dfce792313447086d90eff
SSDEEP 24576:3DVOtagkDGYTv0Jb/ZXNhs0YsWRsFx3hGB:3DM6cJ/ZHMpCG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3

File Explorer

JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3

.exe 794KB

JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3

IMPHASH e358d30c2dc06052dc73bb8d4e25c1a4
SHA256 db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3
MD5 efd086526dfe4c4f996223a0eeda211a
SHA1 4a24572a3f4d71c2600e5b8ea8b8de9c4550da28
SHA512 4c0fd8feaf2775f9581ac3a2577b0e988284f44f8c26fe7bd2f1604cfc636bec1f17def1110eba7f5c2b548e4b4baa1bc6619738d1dfce792313447086d90eff
SSDEEP 24576:3DVOtagkDGYTv0Jb/ZXNhs0YsWRsFx3hGB:3DM6cJ/ZHMpCG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20323

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bidajihu46\cumek\cam\91\lezibuye.pdb

kernel32

InterlockedIncrement OpenJobObjectA ZombifyActCtx GetConsoleAliasesA GetConsoleTitleA LoadLibraryW GetCalendarInfoW CreateEventA WriteConsoleW GetModuleFileNameW GetOverlappedResult FreeLibraryAndExitThread SetLastError GetProcAddress lstrcpynA CreateConsoleScreenBuffer WriteProfileSectionA LoadLibraryA WriteConsoleA LocalAlloc MoveFileA GetModuleFileNameA EnumDateFormatsW GetShortPathNameW GetLongPathNameA HeapSize GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc HeapCreate EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection IsProcessorFeaturePresent GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId CloseHandle ExitProcess WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RaiseException LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc SetFilePointer CreateFileW

ole32

OleInitialize

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_db15fe4dbfe6a64ee56c4cfae9b3ee2326120af78e18447e652d4f391803b9b3

kernel32

ole32

winhttp

generic