JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa

General

Target
JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa
Size 177KB
Sample241225-ely51axnal
SHA256 3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa
MD5 a3aabdff3b4a3399c1829aee537c0beb
SHA1 10eecc1051a96d49e0de197cd18d50f96e3ea8cb
SHA512 fcf179521467be64b64a8a6e5cf709c4e27edcc0e7cc6400e94d6e0feaef0a85c3913767462bfce12ecf4ab52539de41550e6d7558974a021011c658a6547cbb
SSDEEP 3072:o7Gc4zi7lBoiYCKegOfPS1ece1WHY2IDoN44oa+EAF:1zi7lBoFXVcPS1ecn42TN4ra+EAF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa

File Explorer

JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa

.exe 177KB

JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa

IMPHASH 16ab6d1050d2958813a9f0bd21397017
SHA256 3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa
MD5 a3aabdff3b4a3399c1829aee537c0beb
SHA1 10eecc1051a96d49e0de197cd18d50f96e3ea8cb
SHA512 fcf179521467be64b64a8a6e5cf709c4e27edcc0e7cc6400e94d6e0feaef0a85c3913767462bfce12ecf4ab52539de41550e6d7558974a021011c658a6547cbb
SSDEEP 3072:o7Gc4zi7lBoiYCKegOfPS1ece1WHY2IDoN44oa+EAF:1zi7lBoFXVcPS1ecn42TN4ra+EAF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15041

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tusimugelok-zayesovu.pdb

kernel32

GetSystemDefaultLangID HeapCompact LoadResource GlobalAddAtomA GetEnvironmentStringsW SetHandleInformation WaitForSingleObject GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetConsoleTitleA GlobalAlloc GetFirmwareEnvironmentVariableA GetLocaleInfoW CopyFileW LeaveCriticalSection GetFileAttributesA GetFileAttributesW GetDevicePowerState LCMapStringA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WaitForMultipleObjects EnumResourceTypesW EnumDateFormatsA SetConsoleCursorInfo FillConsoleOutputAttribute GlobalAddAtomW CheckRemoteDebuggerPresent EnumCalendarInfoExA LocalFree DecodePointer EncodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement CloseHandle WriteFile GetModuleFileNameW FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId LoadLibraryW Sleep WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile SetStdHandle RtlUnwind FlushFileBuffers HeapSize IsProcessorFeaturePresent HeapReAlloc RaiseException WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CreateFileW

user32

SetCaretPos

ole32

CoGetMalloc

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_3004638c8e9c7e9590c0c1b1286abfbd13f773a195e8a850343e6628be166afa

kernel32

user32

ole32

generic