JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc

General

Target
JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc
Size 161KB
Sample241229-3raats1jer
SHA256 a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc
MD5 57369a2964bae1145d8e60e93cb03a09
SHA1 136acbf24badc0f85b19d262349a062d517a30d6
SHA512 64e3bf8c255f959f7460a69f23372f5d37f4d8e31f5a097e58a11e415785cbaba97587d405b4ecd21c3b6dab88617f84b20ca2788c3dd6ca4bd15acaf7a8fd9a
SSDEEP 3072:4lNGUja6WGK67WLy7jMx5UI+lMMVUB6shv1sH:MGUdWGK6S7UkMVUB3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc

File Explorer

JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc

.exe 161KB

JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc

IMPHASH 88b2573181e0284830f6af4fb97776b1
SHA256 a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc
MD5 57369a2964bae1145d8e60e93cb03a09
SHA1 136acbf24badc0f85b19d262349a062d517a30d6
SHA512 64e3bf8c255f959f7460a69f23372f5d37f4d8e31f5a097e58a11e415785cbaba97587d405b4ecd21c3b6dab88617f84b20ca2788c3dd6ca4bd15acaf7a8fd9a
SSDEEP 3072:4lNGUja6WGK67WLy7jMx5UI+lMMVUB6shv1sH:MGUdWGK6S7UkMVUB3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kofilibijor52\kifuy\sabisef\vik\yucufuhubimo\lipo.pdb

kernel32

GetDefaultCommConfigW HeapAlloc GetConsoleAliasA HeapFree GetEnvironmentStringsW SetConsoleScreenBufferSize BackupSeek GetFirmwareEnvironmentVariableA SizeofResource SetConsoleCursorPosition WriteConsoleW GetModuleFileNameW SetLastError GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc BeginUpdateResourceA GetModuleFileNameA EraseTape AddConsoleAliasA FindNextVolumeA lstrcpyW LCMapStringW SetProcessAffinityMask CreateFileW ReadFile EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetModuleHandleW ExitProcess WriteFile HeapCreate Sleep HeapSize RtlUnwind GetLastError SetFilePointer CloseHandle FreeEnvironmentStringsW WideCharToMultiByte TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleCP GetConsoleMode LoadLibraryW HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetStdHandle FlushFileBuffers MultiByteToWideChar GetStringTypeW SetEndOfFile GetProcessHeap

user32

GetCursorPos

gdi32

GetCharWidth32A

advapi32

DeregisterEventSource

Name

.text

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hivew

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kefikid

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.put

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a8169b1cab58e46a0c1b4627474f2d9cf23b7050a5d3ac2b8704e619b67835fc

kernel32

user32

gdi32

advapi32

generic