JaffaCakes118_851fc4f6765ad4015d96a5952098b255c720ec8d88a974d6dfc498bec91910f3
- SHA256 851fc4f6765ad4015d96a5952098b255c720ec8d88a974d6dfc498bec91910f3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68.exe
Resource
win7-20241023-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
12 signatures
150 seconds
General
- Target JaffaCakes118_851fc4f6765ad4015d96a5952098b255c720ec8d88a974d6dfc498bec91910f3
- Size 676KB
- Sample241222-xe4e9awlgn
- SHA256 851fc4f6765ad4015d96a5952098b255c720ec8d88a974d6dfc498bec91910f3
- MD5 20c1063f984f5476f05de4c3735ef1a0
- SHA1 65423aa958acb6b26d644221c90581a24269e878
- SHA512 ae1f66d17c5f2476dec8be7c27dd8a668ad73a5c7bd964b68a733fd64dcfa6cf087539f7591e846836daecec4d7f1a7ba4801e58c5d05bbb17238273b794356a
- SSDEEP 12288:3xy/guavLD20/BxB9wf1Ej5VtlTylwGMR0Hb6nCCkKeLcPpu7EQ0N/Yj:3sYuavL//B1wf1EjPtsJ2076CCkfcPkF
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68
File Explorer
-
JaffaCakes118_851fc4f6765ad4015d96a5952098b255c720ec8d88a974d6dfc498bec91910f3.zip 676KB
-
55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68.exe 814KB
55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68
- IMPHASH ed7df88ddba97c51d3b160fb2406ce26
- SHA256 55e76df782e2a76e93ae1cc632942a169794a544b9c472e1043ea5a5eb70bd68
- MD5 960c9dad66df9d52c73f149540b6f7b3
- SHA1 11920d07db2635587e2bb198d7c209d2e1be65ad
- SHA512 f1a64cf32418b1c932a0dc93521895eed60a87abdebba5f0c3bac4e3345655285038077e15f44014b6e840a07e5d9d1e944ed422148b62bc5059cf70537d0a14
- SSDEEP 24576:2sX+/5uah35/BV2fHEPPtgjS0f6cCWdcPub:2JwHgCjS0FCY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
45824
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\jotediguwobi zafuk55_dezuki\xobahifijagi\yeyomeziguc\36_kud.pdb
kernel32
VerifyVersionInfoW
WriteConsoleInputA
EnumDateFormatsW
CopyFileExW
DnsHostnameToComputerNameW
FindNextFileW
ReadConsoleOutputCharacterW
SetConsoleActiveScreenBuffer
LockFile
GetProfileSectionW
QueryDosDeviceW
RequestWakeupLatency
GetProcessPriorityBoost
GetDriveTypeW
GlobalGetAtomNameA
DeleteFileW
FindNextVolumeMountPointW
TlsSetValue
SizeofResource
WriteConsoleInputW
GetConsoleTitleW
GetComputerNameExW
OpenEventA
CallNamedPipeA
GetModuleHandleA
GetSystemDirectoryA
GetDriveTypeA
BuildCommDCBAndTimeoutsA
GetProcAddress
GetShortPathNameA
DeleteFileA
GetCommandLineW
InterlockedIncrement
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageA
GetModuleHandleW
EnterCriticalSection
FindNextVolumeA
CreateIoCompletionPort
LoadLibraryA
CreateNamedPipeW
GetSystemDefaultLangID
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomW
InterlockedDecrement
HeapFree
_hwrite
InterlockedCompareExchange
GetStartupInfoW
CreateMailslotW
GetCPInfoExW
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
WaitForDebugEvent
SetLastError
LoadLibraryW
VerifyVersionInfoA
VirtualAlloc
GetACP
lstrcpyA
GetConsoleAliasA
GetDiskFreeSpaceExA
TerminateProcess
EnumResourceLanguagesA
SetConsoleTextAttribute
GlobalGetAtomNameW
CreateJobSet
MoveFileW
lstrcpynA
EnumSystemLocalesA
WritePrivateProfileSectionW
WritePrivateProfileStructA
GetPrivateProfileSectionNamesW
GetFileAttributesW
FileTimeToSystemTime
SetTapeParameters
lstrcmpW
SetEvent
MoveFileA
CreateMutexA
FindResourceW
GetCommState
CreateFiber
GetConsoleFontSize
LocalAlloc
SetFileShortNameA
lstrcpyW
HeapLock
GetFileAttributesA
SetCalendarInfoW
GetSystemWindowsDirectoryW
GetConsoleAliasesW
EnumDateFormatsExW
GetComputerNameW
GetPrivateProfileStructW
_hread
LocalFlags
OpenWaitableTimerA
EnumResourceNamesW
CreateFileMappingW
SetProcessShutdownParameters
lstrcpynW
GetFullPathNameW
WriteConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectW
CreateFileW
SetCurrentDirectoryA
GlobalWire
GetFileInformationByHandle
CommConfigDialogW
CreateFileA
GetDefaultCommConfigA
LocalFree
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
WideCharToMultiByte
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
GetCurrentThreadId
TlsFree
GetOEMCP
GetCPInfo
IsValidCodePage
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
user32
CharToOemBuffW
CharUpperW
GetMessageTime
LoadMenuA
advapi32
AbortSystemShutdownW
Name
.text
Size
198KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
586KB
Virtual Size
622KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.lan
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ruwu
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.dayewig
Size
512B
Virtual Size
150B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=150, version=20413,
count=23, id=149, productName=VS2008 build 21022, version=21022,
count=136, id=131, productName=VS2008 build 21022, version=21022,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=202, id=1, productName=Unmarked objects,
count=63, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,