JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259
Size 292KB
Sample241229-3lbayazram
SHA256 96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259
MD5 8a1e0ccf9945d654f0bceffc3e387c6e
SHA1 7cd2eeac9b54711d9a23f9a0abc30a9407837111
SHA512 3e88a1c37cf391652b582578c75e702556231afb44051406bf09171b9e382ce4d580bb41ac180da977f81fee440ac22151da5d68040eb8ee45b7d476f6f69894
SSDEEP 6144:niMhhMfj568D7SXuZet0yobAPtXX85CK0:/hhyj5z3SXuZet0yobAp85
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259

File Explorer

JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259

.exe 292KB

JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259

IMPHASH 0e808ebe57f25366c315c02f0dd7b0e6
SHA256 96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259
MD5 8a1e0ccf9945d654f0bceffc3e387c6e
SHA1 7cd2eeac9b54711d9a23f9a0abc30a9407837111
SHA512 3e88a1c37cf391652b582578c75e702556231afb44051406bf09171b9e382ce4d580bb41ac180da977f81fee440ac22151da5d68040eb8ee45b7d476f6f69894
SSDEEP 6144:niMhhMfj568D7SXuZet0yobAPtXX85CK0:/hhyj5z3SXuZet0yobAp85
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sutuniwigire33\w.pdb

kernel32

GetPrivateProfileSectionNamesW EnumResourceNamesW UnregisterWait GetNumaNodeProcessorMask SetCriticalSectionSpinCount GetCommModemStatus GlobalMemoryStatus SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW SetThreadContext FindFirstChangeNotificationW EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW CopyFileExW TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SetErrorMode FindResourceW FreeLibrary DeleteVolumeMountPointA SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW InterlockedDecrement WaitNamedPipeA SetMailslotInfo ZombifyActCtx SetConsoleActiveScreenBuffer WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA SetEnvironmentVariableW GetNamedPipeHandleStateA SignalObjectAndWait AddConsoleAliasW SetVolumeMountPointW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA GetFileAttributesExA _lclose OutputDebugStringW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA ReadConsoleW CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA SetCommTimeouts CreateActCtxW InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleMode TerminateThread FatalAppExitW ReadConsoleInputA GetThreadSelectorEntry CopyFileW AssignProcessToJobObject GetPrivateProfileStructW GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment ReadConsoleOutputW MapUserPhysicalPagesScatter SetConsoleCP InterlockedPopEntrySList LeaveCriticalSection GlobalFlags lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition GetFileAttributesW HeapQueryInformation GetBinaryTypeA WritePrivateProfileSectionW TerminateProcess GetThreadContext FileTimeToSystemTime GetModuleFileNameW lstrcatA GetBinaryTypeW CompareStringW ExitThread GetVolumePathNameA lstrlenW SetConsoleTitleA GlobalUnlock VirtualUnlock GetTempPathW RaiseException GetStringTypeExA CreateJobObjectA GetPrivateProfileIntW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer BindIoCompletionCallback GetProcAddress FindVolumeMountPointClose GetLongPathNameA VirtualAlloc HeapSize BackupWrite VerLanguageNameA CreateNamedPipeA EnumDateFormatsExA CreateJobSet LocalLock MoveFileW LockFileEx DefineDosDeviceA GetNumaHighestNodeNumber FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId GetFileType WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW CreateHardLinkW GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW SetConsoleWindowInfo SetThreadIdealProcessor HeapWalk GetPrivateProfileStructA GetTapeParameters GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA FindNextFileA WriteProfileStringA EnumDateFormatsA WaitCommEvent _lread GetModuleHandleA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent GetProcessAffinityMask FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA EnumDateFormatsW GetConsoleCursorInfo FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA GetCPInfoExA DuplicateHandle FindFirstVolumeA GetVersionExA TlsAlloc TerminateJobObject CloseHandle FileTimeToLocalFileTime GetVersion QueryDepthSList DeleteTimerQueueTimer GlobalAddAtomW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CommConfigDialogW DeleteFileA CreateFileW SetStdHandle GetComputerNameA GetFullPathNameA GetAtomNameW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer GetModuleHandleW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW IsProcessorFeaturePresent SetFilePointer FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

advapi32

InitiateSystemShutdownA

winhttp

WinHttpReadData

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_96341cf7fd7cd1943d786f67fc1f12a5d8443b78c4604a6acf3ad03d76382259

kernel32

user32

gdi32

advapi32

winhttp

msimg32

generic