JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1

General

Target
JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1
Size 284KB
Sample241224-bvgersxren
SHA256 89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1
MD5 523df49ca016ddcba85d75ea51e13cc1
SHA1 360097a175edff477f95ac76e9a9e08b8ad126dd
SHA512 fa3f3af8990d15bb4a4be4b2929e44a6da0680dcd33c1acf332f17990ad3078a9dad3de7cfddfeb0edeb53429b97644264d40a4370bd3f7ccc7a982f8363878b
SSDEEP 3072:bfwmteWVHxy2D086b1/Z3RdCa9w8k9S20ke93/eNN4gVz/nyYKzLZVZYl6ljp5T1:bwmkGVD0t1/ZBdX4lRVWLZVylSpdtT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1

File Explorer

JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1

.exe 284KB

JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1

IMPHASH 658c49f2b142429657b3337ed8c9de9e
SHA256 89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1
MD5 523df49ca016ddcba85d75ea51e13cc1
SHA1 360097a175edff477f95ac76e9a9e08b8ad126dd
SHA512 fa3f3af8990d15bb4a4be4b2929e44a6da0680dcd33c1acf332f17990ad3078a9dad3de7cfddfeb0edeb53429b97644264d40a4370bd3f7ccc7a982f8363878b
SSDEEP 3072:bfwmteWVHxy2D086b1/Z3RdCa9w8k9S20ke93/eNN4gVz/nyYKzLZVZYl6ljp5T1:bwmkGVD0t1/ZBdX4lRVWLZVylSpdtT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sufutahuyabi-cilubajopefe\vaw.pdb

kernel32

GetThreadContext SetLocalTime FindResourceExW InterlockedIncrement GetQueuedCompletionStatus InterlockedDecrement UnlockFile SetEvent FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW GetConsoleAliasesLengthA SetCommState GetCommandLineA GetPrivateProfileIntA GetSystemDirectoryW LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA GetBinaryTypeA TerminateProcess lstrlenW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle FreeLibraryAndExitThread OpenMutexW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress EnterCriticalSection LoadLibraryA LocalAlloc WritePrivateProfileStringA GetNumberFormatW GetProfileStringA SetThreadIdealProcessor HeapWalk FindAtomA SetSystemTime GlobalWire GetModuleFileNameA FindFirstChangeNotificationA FindNextFileW WriteProfileStringW GetCPInfoExA SetFileShortNameA TlsAlloc EnumResourceLanguagesW UnregisterWaitEx CopyFileExA DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime EncodePointer DecodePointer HeapSetInformation GetStartupInfoW LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW ExitProcess HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree MultiByteToWideChar IsProcessorFeaturePresent FlushFileBuffers SetStdHandle LCMapStringW GetStringTypeW CloseHandle CreateFileW RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_89f6d07d84dababb976153bafeb830f97341b6259f9330800aade067af52c5c1

kernel32

generic