JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8

General

Target
JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8
Size 228KB
Sample241226-vvy5cssmcn
SHA256 9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8
MD5 39f8a25f73e04416c3de07548c94287d
SHA1 ab931fd48f4711835300f7d26fefb6720e998633
SHA512 e909e52d5ef6804fca2111b0131d8892a9a1c747f80d4968292e7228d26b61517657ea63f319e14ee6692b509220895d4cf66e1a3ff208e56beeeeedfc298880
SSDEEP 3072:AcFOZRBBnLzOcn1H6yVphikEkzRO0SXT7yX1bNYys++2U0zsVbMDTAo:AcFO3XScn1HfpLEkNrN7JlRj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8

File Explorer

JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8

.exe 228KB

JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8

IMPHASH dfddb4935ecfeccd8e67f98d0f98b8e1
SHA256 9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8
MD5 39f8a25f73e04416c3de07548c94287d
SHA1 ab931fd48f4711835300f7d26fefb6720e998633
SHA512 e909e52d5ef6804fca2111b0131d8892a9a1c747f80d4968292e7228d26b61517657ea63f319e14ee6692b509220895d4cf66e1a3ff208e56beeeeedfc298880
SSDEEP 3072:AcFOZRBBnLzOcn1H6yVphikEkzRO0SXT7yX1bNYys++2U0zsVbMDTAo:AcFO3XScn1HfpLEkNrN7JlRj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\led-xetevofoce\memuv_bopefavun xepaxaro_liwab\gaji\genobeje_ho.pdb

kernel32

InterlockedDecrement InitializeSListHead GetSystemWindowsDirectoryW HeapFree FlushViewOfFile LocalFlags LoadLibraryW FreeConsole GetSystemWow64DirectoryW SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoW CreateDirectoryA GetCPInfoExW FindFirstChangeNotificationW GetProcAddress SetVolumeLabelW SetStdHandle GetPrivateProfileStringA OpenMutexA LocalAlloc AddAtomW PostQueuedCompletionStatus FindAtomA GetPrivateProfileStructA SetEnvironmentVariableA WTSGetActiveConsoleSessionId HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA OutputDebugStringA GetLastError SearchPathW CloseHandle CreateFileW GetCommandLineA SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapReAlloc HeapSize HeapQueryInformation RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers

advapi32

AbortSystemShutdownA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_9ff44d9fb9de4235ad6b9046731a425c2be0329f36c6d8d31980aa85c71e05a8

kernel32

advapi32

winhttp

generic