JaffaCakes118_52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1

General

Target
JaffaCakes118_52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1
Size 668KB
Sample241223-pvsppazmdl
SHA256 52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1
MD5 226b22f59abaa82144a424a67a7ddbfc
SHA1 71df889cabfe15f0361b5d499a4994d9265980aa
SHA512 3aa6c9d501b8d081a0b588d974b53d7432754571534b9f1134749222384454cd527d7691ffd10e2fd9416457d39392b0317ee039b4e424ee3f78782f1416915f
SSDEEP 12288:OKA0hBFndHbL0vjU26RWmykQqUkS/Nz7ah5VVEIarB56MIabKIn5:OT0hBFnloY26RtYqUVgjV6BVBn5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample

File Explorer

JaffaCakes118_52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1

.gz 668KB
sample

.exe 785KB

JaffaCakes118_52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1

SHA256 52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1
MD5 226b22f59abaa82144a424a67a7ddbfc
SHA1 71df889cabfe15f0361b5d499a4994d9265980aa
SHA512 3aa6c9d501b8d081a0b588d974b53d7432754571534b9f1134749222384454cd527d7691ffd10e2fd9416457d39392b0317ee039b4e424ee3f78782f1416915f
SSDEEP 12288:OKA0hBFndHbL0vjU26RWmykQqUkS/Nz7ah5VVEIarB56MIabKIn5:OT0hBFnloY26RtYqUVgjV6BVBn5
MD5 SHA1 SHA512 SSDEEP

sample

IMPHASH 64a415caa704a81a9d42eaf13024b688
SHA256 febcdb5b76ce20f3f85fd9521913e38b0364a40a873db4b2ad5116d6b92d442d
MD5 dd0fbd97cd0e421a66ede4b9feba07c7
SHA1 2f60bf4743c8a87b53bbc8cd5eed505fdf57cf5d
SHA512 8713d9f8f0e9615d836d9862d820393e94df42a4edc807d3c520f01f67efe0b72eb1073e882d7980b68dc9dc77384220c56e0e7edb8527f53842683aa552199c
SSDEEP 12288:fE7HrnlzeBv2UFZl9bT0RDqqslGWikuqUUq/51dqh5DV2I4rBL6M/Z:Anl0rFZPYGqsl1WqUDgjD4v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

40176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hohozuketeluy\nunek belo-lel-boyalojedi lizixazibihiyu\zayo.pdb

kernel32

OpenMutexW GetSystemTimeAdjustment VerSetConditionMask FindNextVolumeA HeapWalk GetNamedPipeHandleStateA FileTimeToLocalFileTime FillConsoleOutputCharacterW VirtualAlloc TerminateProcess GetCurrentProcessId GetVersionExW EnumDateFormatsExA EnumResourceNamesA FindNextFileA CopyFileExA BuildCommDCBA SetDefaultCommConfigA WritePrivateProfileStructA HeapQueryInformation ChangeTimerQueueTimer ReadConsoleInputW WriteConsoleInputW GetVersionExA AddAtomA SearchPathW GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc GetBinaryTypeW GetProfileSectionA InterlockedDecrement ReadConsoleOutputCharacterA FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageA SetDllDirectoryW PostQueuedCompletionStatus LoadLibraryA WritePrivateProfileStringW GetUserDefaultLCID GetProcessHeap SetWaitableTimer SetConsoleTextAttribute InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileA GetLastError SetCalendarInfoA DebugBreak EndUpdateResourceA SetLastError DeleteVolumeMountPointA FatalAppExitA OpenFileMappingW GetConsoleAliasExesLengthA lstrcmpA ContinueDebugEvent InterlockedExchangeAdd GlobalFix CopyFileW GetACP GlobalFindAtomW lstrcatA GetPrivateProfileStringA GetMailslotInfo CreateActCtxW GetPrivateProfileIntW _lwrite CreateIoCompletionPort CreateNamedPipeA GetAtomNameW FlushConsoleInputBuffer EnumResourceTypesA lstrlenA MoveFileW WriteConsoleA lstrcpyA GetModuleHandleW ReadConsoleOutputA SetThreadContext ReleaseActCtx GetStringTypeA GetPrivateProfileStringW GetFileAttributesExA MoveFileA GetVolumePathNameW SetCommMask SetFileShortNameW VerLanguageNameA LockFile EnumDateFormatsW WTSGetActiveConsoleSessionId LoadLibraryW GetOverlappedResult AttachConsole GlobalGetAtomNameA SetComputerNameW GetConsoleAliasExesLengthW WriteConsoleInputA CreateMailslotA SystemTimeToTzSpecificLocalTime MoveFileWithProgressW DebugActiveProcess GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntA GetTickCount GetModuleFileNameA GetConsoleAliasesLengthW GlobalWire GetCompressedFileSizeW SetThreadPriority MapUserPhysicalPages WriteConsoleOutputCharacterW EnumDateFormatsA TerminateJobObject CreateFileA GetDateFormatA BuildCommDCBAndTimeoutsA GetConsoleAliasExesW OpenWaitableTimerW RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime Sleep GetProcAddress ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle GetConsoleOutputCP CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_52f1349d9dc91034ca08152506f153903d926949c04e75e7d88df756e167a5f1

sample

kernel32

generic