JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54

General

Target
JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54
Size 241KB
Sample241229-3dptcszpct
SHA256 8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54
MD5 0ae6c8339377c3855ddadcad76673d8a
SHA1 ce2b58ab96ef3790ce55307ee3d7c04399b3e821
SHA512 0d99817de8f5450c05303eafb81d533003ef77f1df8a59d5ae068675ecbba15f00d80d1da307e5eb02a74ebfb4c8d7f2ed3ee64b51995dbaa0644d36a68d42df
SSDEEP 3072:GOsUA8KZQ/IxsPVg4nkvzaHWgSjqdF0w2Uyopz9ZeCqJXXfehv1Ijoxw9xk:oUA8GV2e4nYWHEjqPt9cCqxmhv1pxQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54

File Explorer

JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54

.exe 241KB

JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54

IMPHASH a9e1103bbc08b87eea5d7311fb0b7c3e
SHA256 8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54
MD5 0ae6c8339377c3855ddadcad76673d8a
SHA1 ce2b58ab96ef3790ce55307ee3d7c04399b3e821
SHA512 0d99817de8f5450c05303eafb81d533003ef77f1df8a59d5ae068675ecbba15f00d80d1da307e5eb02a74ebfb4c8d7f2ed3ee64b51995dbaa0644d36a68d42df
SSDEEP 3072:GOsUA8KZQ/IxsPVg4nkvzaHWgSjqdF0w2Uyopz9ZeCqJXXfehv1Ijoxw9xk:oUA8GV2e4nYWHEjqPt9cCqxmhv1pxQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pufikebejuse\b.pdb

kernel32

FreeLibrary InterlockedIncrement GetCommState GetProfileStringW CallNamedPipeW GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetVolumeInformationA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetStartupInfoA SetThreadLocale GetStdHandle CopyFileExW GetLastError SetLastError GetProcAddress CreateNamedPipeA SearchPathA LoadLibraryA OpenMutexA CreateSemaphoreW FindAtomA SetSystemTime GetModuleFileNameA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA SetFileShortNameA TerminateJobObject FindAtomW UnregisterWaitEx DeleteFileA lstrlenA GetCPInfoExW GetThreadContext CloseHandle CreateFileW WideCharToMultiByte EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate EnterCriticalSection LeaveCriticalSection LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_8d5cf5412047ce007f13174937a4d7664bf97816b1b274f887c5b91eecfd3e54

kernel32

advapi32

winhttp

generic