JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1

General

Target
JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1
Size 160KB
Sample241224-s97zps1lev
SHA256 94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1
MD5 6ec4ce9ef727b0ce459f8b33a2558946
SHA1 223323ff0bbd014582fe858475493e7786fa75a6
SHA512 a4197009bc6dbeb5fc37dc38feca53d3f444a9a3de98fa9e6c5c640a6cab0454ce05b6d58ce4c666e8530f87c7efff22506528b4f9fa8c4120011374a394926a
SSDEEP 3072:Y27J44gMgmR69KfphQ2j11L0Jbudv5aNlXdUMQ:YggmR6oBhQ2j1oqv5aTG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1

File Explorer

JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1

.exe 160KB

JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1

IMPHASH 160acbbb3e0ca7c9adff74003859e587
SHA256 94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1
MD5 6ec4ce9ef727b0ce459f8b33a2558946
SHA1 223323ff0bbd014582fe858475493e7786fa75a6
SHA512 a4197009bc6dbeb5fc37dc38feca53d3f444a9a3de98fa9e6c5c640a6cab0454ce05b6d58ce4c666e8530f87c7efff22506528b4f9fa8c4120011374a394926a
SSDEEP 3072:Y27J44gMgmR69KfphQ2j11L0Jbudv5aNlXdUMQ:YggmR6oBhQ2j1oqv5aTG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\numifumetehet_rawa20\runumesevomak\vofu.pdb

kernel32

GetDefaultCommConfigW LoadResource GlobalAddAtomA GetEnvironmentStringsW WaitForSingleObject CreateHardLinkA EnumCalendarInfoExW GetConsoleAliasesA GetConsoleAliasesLengthA GetSystemTimeAsFileTime CancelDeviceWakeupRequest EnumResourceTypesA InitializeCriticalSectionAndSpinCount ReadFileScatter GetFileAttributesA SetConsoleCursorPosition HeapCompact GetAtomNameW FlushFileBuffers SetLastError GetProcAddress VirtualAlloc GetFirmwareEnvironmentVariableW LoadLibraryA LocalAlloc WaitForMultipleObjects GetConsoleTitleW FillConsoleOutputAttribute EnumDateFormatsW CloseHandle DeleteAtom GlobalAddAtomW CheckRemoteDebuggerPresent LCMapStringW GetSystemDefaultLangID CreateFileW HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetLastError HeapFree GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize SetHandleCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryW HeapReAlloc RtlUnwind SetStdHandle WriteConsoleW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent

user32

SetCaretPos

advapi32

CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_94d8164b8e24f05fc9a654c110a8a126816f69554fda6ad4971a6a7a450059b1

kernel32

user32

advapi32

generic