JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1

General

Target
JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1
Size 164KB
Sample241222-kdbbvs1nfr
SHA256 fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1
MD5 688908d3247336adfc48107f72dedb39
SHA1 9ecc3f6b91333c9c581c1c2cac15a20f48f57c90
SHA512 e6d5f39f216448acdad10ce0f6e5718fb4937c7790a9987e7228b9e8742f6fd3a85483288052121365480b86f3fdf4e183434fe863d82a545ef30705b2739197
SSDEEP 3072:avs48eTSwJxXKS5gZ8S7Y2DZO6p5L9eS9H6p:ak4dGiv5GFY29eEa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1

File Explorer

JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1

.exe 164KB

JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1

IMPHASH ce4c7ed44a96045386f2afd2e6f500aa
SHA256 fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1
MD5 688908d3247336adfc48107f72dedb39
SHA1 9ecc3f6b91333c9c581c1c2cac15a20f48f57c90
SHA512 e6d5f39f216448acdad10ce0f6e5718fb4937c7790a9987e7228b9e8742f6fd3a85483288052121365480b86f3fdf4e183434fe863d82a545ef30705b2739197
SSDEEP 3072:avs48eTSwJxXKS5gZ8S7Y2DZO6p5L9eS9H6p:ak4dGiv5GFY29eEa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7367

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\botaxic\jacekarugon\zocadonoti\lugor luwis.pdb

kernel32

InterlockedIncrement GetEnvironmentStringsW WaitForSingleObject SetEvent GetSystemTimeAsFileTime CancelDeviceWakeupRequest GetCommandLineA WriteFileGather EnumResourceTypesA SizeofResource LeaveCriticalSection GetFileAttributesW WriteConsoleW ReadFile MapUserPhysicalPages CreateActCtxA GetProcAddress VerLanguageNameA RemoveDirectoryA PrepareTape GetProcessId LocalAlloc GlobalGetAtomNameW WaitForMultipleObjects GetModuleFileNameA GetModuleHandleA EndUpdateResourceA LocalSize FindFirstVolumeW AddConsoleAliasA LocalFree FindNextVolumeA lstrcpyW GetLocaleInfoA GetModuleFileNameW HeapReAlloc GetLastError HeapAlloc GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind FlushFileBuffers LoadLibraryA WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize CreateFileA CloseHandle

user32

GetCursorPos

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_fe6d3f3331a3121fb734f373df045d7de52f73ca59f8b54d11432b25b4a0ddc1

kernel32

user32

gdi32

advapi32

generic