JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

General

Target
JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9
Size 2.3MB
Sample241226-29sdpavjfv
SHA256 69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9
MD5 87ab41a3eb754ff859a264c7114b9066
SHA1 c60a5d955d2f730742341ffa9548fb4d264624d7
SHA512 3a9ef627ec97085f7c607106f72601076020babd79a6badd33bf1614fad49e017f3bbd2d4b1e66197615330c5c7f839a2987ca55e68d0b805be71ae3eda2f2c2
SSDEEP 49152:egLW1DLQjokdvsrJOwDjdHImM6muJtbWWUSBSz5hMtiOc9D7:L+LQcUvsrJVxMqfb5USA5uS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

File Explorer

JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

.exe 2.3MB

JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

IMPHASH 51fc7b551f5af17b8b6571119d9fe03c
SHA256 69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9
MD5 87ab41a3eb754ff859a264c7114b9066
SHA1 c60a5d955d2f730742341ffa9548fb4d264624d7
SHA512 3a9ef627ec97085f7c607106f72601076020babd79a6badd33bf1614fad49e017f3bbd2d4b1e66197615330c5c7f839a2987ca55e68d0b805be71ae3eda2f2c2
SSDEEP 49152:egLW1DLQjokdvsrJOwDjdHImM6muJtbWWUSBSz5hMtiOc9D7:L+LQcUvsrJVxMqfb5USA5uS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zacexef-vogo.pdb

kernel32

InterlockedDecrement GetSystemTimeAdjustment VerSetConditionMask SetLocaleInfoW FindNextVolumeW FindNextChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionW VerifyVersionInfoW LocalFlags GetProcessPriorityBoost FindFirstChangeNotificationA GlobalGetAtomNameA FindResourceExA GetComputerNameExW GetModuleHandleA GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA ExitProcess HeapAlloc InitializeCriticalSection EnumSystemLocalesW DisableThreadLibraryCalls FileTimeToLocalFileTime GetProcessShutdownParameters FindResourceW GetOverlappedResult GetPrivateProfileStructW CreateFiber EnumDateFormatsA VirtualUnlock GetTapeParameters GetPrivateProfileIntA GetAtomNameA FlushConsoleInputBuffer SetProcessAffinityMask GetCPInfoExW SetThreadContext lstrlenA SetConsoleCtrlHandler GlobalGetAtomNameW QueryInformationJobObject lstrcpynA WriteConsoleW GetBinaryTypeW SearchPathA GetCommandLineA VerifyVersionInfoA GetCalendarInfoW GetConsoleTitleA CreateActCtxW FormatMessageA GetModuleHandleW GetConsoleAliasA InterlockedIncrement LoadLibraryW InterlockedExchange FindActCtxSectionGuid SetConsoleCursorInfo UnregisterWait GlobalAlloc GetFileType SetLastError SetProcessPriorityBoost GetMailslotInfo GetSystemDefaultUILanguage GetPrivateProfileStructA OpenMutexA GetLastError HeapReAlloc GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc SetUnhandledExceptionFilter Sleep WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

CharUpperW

gdi32

SelectObject

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_69dc7fa6f994a5275e65d718049370402327b2f17f68ccf4950c10a15dc1d2e9

kernel32

user32

gdi32

generic