JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90

General

Target
JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90
Size 257KB
Sample241222-lms4pstlan
SHA256 88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90
MD5 adcb18a3e4453106ece75a6f10668aca
SHA1 80ac8879cb657167b740fd9cc92457cb4b911f8e
SHA512 2965869d8a4305cc852f229a7d320a5fad21cd06739881183ff1c7ca261f1ddcb4c72f3c248e9f5afe34acb14bcb0b4bfd099b570029b2eb35af9293bc4b20d7
SSDEEP 6144:vv9dBGUFJFctQpYMCbTh3Sew3+Ubw9koXpDCoIK:v1rLFJFdpMZSJb0JDIK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90

File Explorer

JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90

.exe 257KB

JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90

IMPHASH 848a7504f9e97d3a5e7cf95079b638a5
SHA256 88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90
MD5 adcb18a3e4453106ece75a6f10668aca
SHA1 80ac8879cb657167b740fd9cc92457cb4b911f8e
SHA512 2965869d8a4305cc852f229a7d320a5fad21cd06739881183ff1c7ca261f1ddcb4c72f3c248e9f5afe34acb14bcb0b4bfd099b570029b2eb35af9293bc4b20d7
SSDEEP 6144:vv9dBGUFJFctQpYMCbTh3Sew3+Ubw9koXpDCoIK:v1rLFJFdpMZSJb0JDIK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\siwacumuniy.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW SetInformationJobObject FindFirstChangeNotificationW lstrlenA CopyFileExW InterlockedIncrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW SetCommState CreateActCtxW FindResourceExA SetFileShortNameW LoadLibraryW SizeofResource GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA GetModuleFileNameW GetSystemDirectoryA GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle LocalAlloc GetNumberFormatW FindAtomA FindNextFileA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_88f3d40feec95d20183876907c7d0588b1cb2da778fbad1b698ee2baa8126b90

kernel32

generic