JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239
Size 159KB
Sample241225-c9dsvsvrcn
SHA256 76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239
MD5 34f90b79823c2119291242a85372614c
SHA1 a0a1e2ca7601fffa34ba6d0c9fe81214c7fd60f3
SHA512 1047e34b82be935e77079aae9c761c78c9de56ba1003c4c9e891863dd3cc920bd67df5ab4df65f785b21644a493d260524f2557e9554094401b8cc8c8f786c5d
SSDEEP 3072:f754OjNeZE6gjfPa2CAbQSi2sjnh3NnTNJSLZcY4N5FokL:FNeZE6gLJC+l32Nn1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239

File Explorer

JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239

.exe 159KB

JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239

IMPHASH 702a7c8c628781977ea801fc66976f12
SHA256 76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239
MD5 34f90b79823c2119291242a85372614c
SHA1 a0a1e2ca7601fffa34ba6d0c9fe81214c7fd60f3
SHA512 1047e34b82be935e77079aae9c761c78c9de56ba1003c4c9e891863dd3cc920bd67df5ab4df65f785b21644a493d260524f2557e9554094401b8cc8c8f786c5d
SSDEEP 3072:f754OjNeZE6gjfPa2CAbQSi2sjnh3NnTNJSLZcY4N5FokL:FNeZE6gLJC+l32Nn1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fapodeficitiy\ja.pdb

kernel32

GetDefaultCommConfigW GetEnvironmentStringsW WaitForSingleObject CreateHardLinkA EnumCalendarInfoExW GetConsoleAliasesA GetConsoleAliasesLengthA GetSystemTimeAsFileTime CancelDeviceWakeupRequest EnumResourceTypesA GetLocaleInfoW InitializeCriticalSectionAndSpinCount SizeofResource GetProcessHandleCount GetFileAttributesA SetConsoleCursorPosition HeapCompact LCMapStringA GetHandleInformation SetLastError GetProcAddress VirtualAlloc CopyFileA GetFirmwareEnvironmentVariableW LoadLibraryA LocalAlloc LockResource WaitForMultipleObjects GetConsoleTitleW FillConsoleOutputAttribute EnumDateFormatsW CloseHandle DeleteAtom GlobalAddAtomW CheckRemoteDebuggerPresent LCMapStringW GetAtomNameW GetSystemDefaultLangID CreateFileW IsProcessorFeaturePresent GetStringTypeW HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetLastError HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW HeapCreate Sleep HeapSize SetFilePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind LoadLibraryW HeapReAlloc ReadFile SetStdHandle FlushFileBuffers WriteConsoleW MultiByteToWideChar

user32

SetCaretPos

advapi32

CloseEventLog

ole32

CoGetMalloc

winhttp

WinHttpQueryOption WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_76e5de1e9ebafc1cd7480d3b6223e62cfe2e98a7e6a4afcd463af0f2b219c239

kernel32

user32

advapi32

ole32

winhttp

generic