JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937

General

Target
JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937
Size 234KB
Sample241227-c56cbazpdr
SHA256 8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937
MD5 5722b3f6ae81d9b1578fcc798063b345
SHA1 f88b48d57a4452b53f0752e7514fdea6072f4b57
SHA512 e33bf3a8d3872eb917a6895ed2f53b22216d558abf561a9cbba6defba7ec4c6e3a9d5798fe4f2e35813f3fad699787598a3b44be19eba3d086ecff75cd95914f
SSDEEP 6144:Poi7E6trwhkr0QGcZHb8S68vy3fMw6S65:Px7E6trwi0QGchG0uMwO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937

File Explorer

JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937

.exe 234KB

JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937

IMPHASH f04f32f42fdfa69095db11dda219012b
SHA256 8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937
MD5 5722b3f6ae81d9b1578fcc798063b345
SHA1 f88b48d57a4452b53f0752e7514fdea6072f4b57
SHA512 e33bf3a8d3872eb917a6895ed2f53b22216d558abf561a9cbba6defba7ec4c6e3a9d5798fe4f2e35813f3fad699787598a3b44be19eba3d086ecff75cd95914f
SSDEEP 6144:Poi7E6trwhkr0QGcZHb8S68vy3fMw6S65:Px7E6trwi0QGchG0uMwO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nulawexavol58\kap56\romilazivogafi\nup52-hece.pdb

kernel32

SetInformationJobObject lstrlenA InterlockedDecrement InitializeSListHead GetProfileStringW GetUserDefaultLangID LoadLibraryW ReadConsoleInputA FreeConsole GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult GetStartupInfoW CreateDirectoryA GetCPInfoExW GetLastError GetProcAddress VirtualAlloc CreateNamedPipeA SetStdHandle SearchPathA GetPrivateProfileStringA OpenMutexA LocalAlloc MoveFileA PostQueuedCompletionStatus FindAtomA GetPrivateProfileStructA SetSystemTime SetEnvironmentVariableA GetModuleFileNameA WTSGetActiveConsoleSessionId HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA OutputDebugStringA CloseHandle CreateFileW WideCharToMultiByte GetCommandLineA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW SetLastError HeapValidate IsBadReadPtr RtlUnwind QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection WriteConsoleW OutputDebugStringW LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RaiseException SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_8ce1a5b895ecaca526fa22d661a99b5b3fd0c125fb778ce2896946201717e937

kernel32

winhttp

generic