JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684

General

Target
JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684
Size 238KB
Sample241229-cftbfsypgj
SHA256 90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684
MD5 6308912dbac2a0b3bb83a38428b05928
SHA1 95ae34a688611808b01c1994cdbced788273325d
SHA512 c013c50c0796576bc6a1b581b88e080ebc63a1089c2937527c56b5edbd5aff9a2f1042e9e275736a51a4df48f13efcfa286cbf13b8f59cb5821cb22e31279114
SSDEEP 6144:LMfeF3QoSEUI692A/Im7sseZfG+ZH2KsItnT:Lu0goSEo9226X3WKF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684

File Explorer

JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684

.exe 238KB

JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684

IMPHASH 69d02296fd41d5fbc6c18775cf2c5cb0
SHA256 90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684
MD5 6308912dbac2a0b3bb83a38428b05928
SHA1 95ae34a688611808b01c1994cdbced788273325d
SHA512 c013c50c0796576bc6a1b581b88e080ebc63a1089c2937527c56b5edbd5aff9a2f1042e9e275736a51a4df48f13efcfa286cbf13b8f59cb5821cb22e31279114
SSDEEP 6144:LMfeF3QoSEUI692A/Im7sseZfG+ZH2KsItnT:Lu0goSEo9226X3WKF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jakezati71\diluf95_jazicopari_79.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW lstrlenA FreeLibrary InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA CreateActCtxW FindResourceExA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA GetStartupInfoW LCMapStringA GetPrivateProfileIntW SetThreadLocale GetStdHandle GetLastError SetLastError GetProcAddress CreateNamedPipeA LoadLibraryA CreateSemaphoreW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA GetCPInfoExA TerminateJobObject FindAtomW UnregisterWaitEx GetSystemTime CopyFileExA DeleteFileA CloseHandle CreateFileW InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent SetStdHandle RaiseException FlushFileBuffers

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_90601a67e1ff329483cdb59a6e76125533415bad9a395ed3e09d7f00da5c3684

kernel32

winhttp

generic