JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a

General

Target
JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a
Size 291KB
Sample241223-tsatbavjht
SHA256 52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a
MD5 4e6018f8aa4e23f9682ad29bbe4bff86
SHA1 314329b8e37fed0104cf518ed7e221c77f78a217
SHA512 f265ffb7ca36419f45c2cbc28cd14a26e0720355e6950426ca357c57e67c671252f2220a6dc6d236185129951796e9cd352dd2e5425acd9024a4806692a0d743
SSDEEP 6144:C9DzZDKZGtx0NSBXbTW8WxQs9dcBHKNUp/rcAst:ClztVtxNrtGQs9dcBHKNAst
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a

File Explorer

JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a

.exe 291KB

JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a

IMPHASH 8a60cb5b452f4bdbf9698ee60f40d39c
SHA256 52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a
MD5 4e6018f8aa4e23f9682ad29bbe4bff86
SHA1 314329b8e37fed0104cf518ed7e221c77f78a217
SHA512 f265ffb7ca36419f45c2cbc28cd14a26e0720355e6950426ca357c57e67c671252f2220a6dc6d236185129951796e9cd352dd2e5425acd9024a4806692a0d743
SSDEEP 6144:C9DzZDKZGtx0NSBXbTW8WxQs9dcBHKNUp/rcAst:ClztVtxNrtGQs9dcBHKNAst
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

117056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\livubonegexe\g.pdb

kernel32

TlsGetValue GetCPInfo InterlockedDecrement GetSystemWindowsDirectoryW HeapFree SetHandleInformation GetProfileSectionA SetVolumeMountPointW UnlockFile BackupSeek FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr GetConsoleAliasesLengthA ReadConsoleW CreateActCtxW GetDriveTypeA TlsSetValue ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemWow64DirectoryW GetVersionExW SetDllDirectoryA SetConsoleMode SetConsoleCursorPosition VerifyVersionInfoA IsDBCSLeadByte GetSystemDirectoryA CompareStringW GetStartupInfoW WritePrivateProfileStringW GetNamedPipeHandleStateW FindFirstFileExA GetLastError SetLastError GetProcAddress WriteProfileSectionA GlobalGetAtomNameA BuildCommDCBW GetPrivateProfileStringA OpenWaitableTimerA OpenWaitableTimerW SetFileApisToANSI QueryDosDeviceW SetSystemTime SetEnvironmentVariableA GetModuleFileNameA SetConsoleCursorInfo FindFirstChangeNotificationA FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime SetProcessShutdownParameters SetFileShortNameA ReadConsoleInputW GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime CloseHandle SetStdHandle FlushFileBuffers LCMapStringW MoveFileA GetCommandLineW HeapSetInformation IsProcessorFeaturePresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement ExitProcess GetEnvironmentStringsW HeapValidate TlsAlloc TlsFree HeapCreate WriteFile RaiseException RtlUnwind GetACP GetOEMCP IsValidCodePage SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation GetStringTypeW MultiByteToWideChar CreateFileW

user32

GetCursorInfo GetMessagePos

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_52e330e3855744ad7120e6ad39dff2b8a6c3bbdb217164fd7443fc8c06f54e1a

kernel32

user32

winhttp

generic