JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c

General

Target
JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c
Size 237KB
Sample241229-294fysznct
SHA256 a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c
MD5 1191183d3c4cca2e9799d6a6d1c67b18
SHA1 6924ade5ffeef5b226223b83820e0e7c962a6102
SHA512 7dcf7b30bb597917996ae1b22125df13127ee0a67242440c4b1ca3d7eb3f14f7435d180b1141d7c0cdee6e50891398ccac2a05c7953b372173b20bd66b282353
SSDEEP 6144:64Mm3W6nJ+lQ/7O3gLtA3wdZwwisdBLyJFJN5P0:6dbYJ+lQMgLtAgtiMxyJFJNN0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c

File Explorer

JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c

.exe 237KB

JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c

IMPHASH bec5279be0cb3c653f5b0b143b00a99c
SHA256 a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c
MD5 1191183d3c4cca2e9799d6a6d1c67b18
SHA1 6924ade5ffeef5b226223b83820e0e7c962a6102
SHA512 7dcf7b30bb597917996ae1b22125df13127ee0a67242440c4b1ca3d7eb3f14f7435d180b1141d7c0cdee6e50891398ccac2a05c7953b372173b20bd66b282353
SSDEEP 6144:64Mm3W6nJ+lQ/7O3gLtA3wdZwwisdBLyJFJN5P0:6dbYJ+lQMgLtAgtiMxyJFJNN0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tiyifegacuri_bejemubirahi\fizumov92\yut\lihijo\moca\fib\m.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetPrivateProfileStringW GetUserDefaultLangID GetCommandLineA GlobalAlloc SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult GetStartupInfoA GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress CreateNamedPipeA MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetProfileStringA PostQueuedCompletionStatus FindAtomA SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW DeleteFileW CloseHandle CreateFileW WideCharToMultiByte GetCommandLineW GetStartupInfoW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW RtlUnwind HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RaiseException FlushFileBuffers

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a3adb0166f99e3d6632f0c915e9bf9361223b42639703f13873d9a1934e6797c

kernel32

winhttp

generic