JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049

General

Target
JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049
Size 687.2MB
Sample241229-gexppstqgq
SHA256 10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049
MD5 b7e91d713172dd2ed07e684d42a69e2a
SHA1 49ffcaf6866abcf477f1736cae9d1ec57f678fad
SHA512 ae7c1422ac13eb959f3b209061a8e67d3c1bdf530fa838c0bee889dcc53ec3e3966d59d2fabd22bcc333fadc61c4b5902ea7b232f661f08ea9182c3d9b6e39d8
SSDEEP 12288:OJxEjE1RrkHDS8BULn0gufJRU4WdN4tNCoF0g:6uS8GAJUn4tzF0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049

File Explorer

JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049

.exe 687.2MB

JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049

IMPHASH 5e6fee1da20497bb537514f82afeb999
SHA256 10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049
MD5 b7e91d713172dd2ed07e684d42a69e2a
SHA1 49ffcaf6866abcf477f1736cae9d1ec57f678fad
SHA512 ae7c1422ac13eb959f3b209061a8e67d3c1bdf530fa838c0bee889dcc53ec3e3966d59d2fabd22bcc333fadc61c4b5902ea7b232f661f08ea9182c3d9b6e39d8
SSDEEP 12288:OJxEjE1RrkHDS8BULn0gufJRU4WdN4tNCoF0g:6uS8GAJUn4tzF0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4381

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Администратор\Downloads\Documents\icgj097gsfy7z\output.pdb

kernel32

VirtualAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess WriteConsoleW InterlockedPushEntrySList InterlockedFlushSList RaiseException RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetCurrentThread OutputDebugStringW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetProcessHeap SetConsoleCtrlHandler HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW CreateFileW CloseHandle DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_10996ff279c9a31dbdea82d6a3c9dbd3e51cbd7897437c98827de00a66196049

kernel32

generic