JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33

General

Target
JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33
Size 284KB
Sample241229-jtkd2axjbx
SHA256 5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33
MD5 0b19b04338ddda5554112c86c5791684
SHA1 93cdd5161cb58122fc0edfe66a7af5b75a89ff4c
SHA512 39fb27528029cd6664bd503625ef13f116dfea6353271bfebf74f69586e844153c0d8e8452acbf481b450fa511bd8a0ce4ed2f9995b40f57374394159879b6eb
SSDEEP 6144:uT5AEWRLSnPVskaD/gi4T9HROhxxpeTr/ekI:ulAvGnPSdDnzxp6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33

File Explorer

JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33

.exe 284KB

JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33

IMPHASH d33805713bf84c5172011e6ee58dcc60
SHA256 5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33
MD5 0b19b04338ddda5554112c86c5791684
SHA1 93cdd5161cb58122fc0edfe66a7af5b75a89ff4c
SHA512 39fb27528029cd6664bd503625ef13f116dfea6353271bfebf74f69586e844153c0d8e8452acbf481b450fa511bd8a0ce4ed2f9995b40f57374394159879b6eb
SSDEEP 6144:uT5AEWRLSnPVskaD/gi4T9HROhxxpeTr/ekI:ulAvGnPSdDnzxp6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

18099

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xegizije\muk86\wodurakago-jumeji.pdb

kernel32

HeapReAlloc GlobalDeleteAtom GetLocaleInfoA InterlockedIncrement GetQueuedCompletionStatus GetEnvironmentStringsW SetEvent ReadConsoleW GetCommandLineA CreateActCtxW GlobalAlloc CopyFileW FreeConsole LeaveCriticalSection GetFileAttributesA HeapCreate WriteConsoleW GetModuleFileNameW lstrlenW ReleaseSemaphore SetConsoleTitleA FlushFileBuffers DeactivateActCtx InterlockedExchange GetProcAddress BeginUpdateResourceW RemoveDirectoryA VerLanguageNameW LocalAlloc SetConsoleWindowInfo SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA EraseTape VirtualProtect EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW FindNextVolumeA lstrcpyW GetConsoleOutputCP WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW VirtualFree VirtualAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode GetLocaleInfoW SetEndOfFile GetProcessHeap ReadFile WriteConsoleA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_5f1de5ad55c9145f7d703b693ce532efad766fd47cbc10b87562d815c059ae33

kernel32

generic