JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac

General

Target
JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac
Size 157KB
Sample241222-pbbxtsxmes
SHA256 abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac
MD5 cd6e5ac889b0cc1a71bd010f1b58ec00
SHA1 ef8533ce236484acce96615d8b1dd99a387212fc
SHA512 74f48a093c96c087bdde32c81cadaedd457acfa36fc17f64ff23ce0c303e83c489cce3e7610d565d2feba415638c00f451b6662cee5e2045c53d9bbed148e51b
SSDEEP 3072:GPEYIsfqkdK0Y4EdFN5uMum0X1Zy//S9H6:GsnsiJ0GKDZy//Ea
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac

File Explorer

JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac

.exe 157KB

JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac

IMPHASH e96a33a04e8bd156ff22aa66a6083b5e
SHA256 abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac
MD5 cd6e5ac889b0cc1a71bd010f1b58ec00
SHA1 ef8533ce236484acce96615d8b1dd99a387212fc
SHA512 74f48a093c96c087bdde32c81cadaedd457acfa36fc17f64ff23ce0c303e83c489cce3e7610d565d2feba415638c00f451b6662cee5e2045c53d9bbed148e51b
SSDEEP 3072:GPEYIsfqkdK0Y4EdFN5uMum0X1Zy//S9H6:GsnsiJ0GKDZy//Ea
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7379

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wap-vifuf.pdb

kernel32

InterlockedIncrement WaitForSingleObject SetEvent GetSystemTimeAsFileTime GetCommandLineA WriteFileGather EnumResourceTypesA GetEnvironmentStrings GlobalAlloc SizeofResource LeaveCriticalSection FindNextVolumeW GetFileAttributesW ReadFile MapUserPhysicalPages CreateActCtxA GetDevicePowerState GetProcAddress VerLanguageNameA RemoveDirectoryA PrepareTape WriteConsoleA GetProcessId GlobalGetAtomNameW WaitForMultipleObjects GetModuleFileNameA GetModuleHandleA EndUpdateResourceA LocalSize FindFirstVolumeW AddConsoleAliasA LocalFree lstrcpyW GetLocaleInfoA GetModuleFileNameW HeapReAlloc GetLastError HeapAlloc GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind FlushFileBuffers LoadLibraryA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize CreateFileA CloseHandle

user32

GetCursorPos

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_abb02d0e5622d63642e0ddbfcc1788078a8618a6a7c8094956d877704cb86cac

kernel32

user32

gdi32

advapi32

generic