JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f

General

Target
JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f
Size 239KB
Sample241229-qjty2ssmfl
SHA256 ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f
MD5 fd72d95adb8b07cdc8a7dfa8a6b6131a
SHA1 4836083fc513785fb3f1515b6ac9b7a0f8c3a4d0
SHA512 8e9d8c81f3b5a7228512048989509777e3a16f612a7d4f0551d629a8239913577e192037935239888d8c66ae72df13be7947d5e2f4eee7b6b3a82cdcbb82e725
SSDEEP 3072:gNexIXVg04czVH2c7rY/yWA1t6RzQKL00vycfCnMcK6bqBCLfvhv6f4FKPsQ:gNexwy0/zI4E/zA1WzQDMYXFi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f

File Explorer

JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f

.exe 239KB

JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f

IMPHASH 8476831dcd3ec87a4c86e61ca01b35a0
SHA256 ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f
MD5 fd72d95adb8b07cdc8a7dfa8a6b6131a
SHA1 4836083fc513785fb3f1515b6ac9b7a0f8c3a4d0
SHA512 8e9d8c81f3b5a7228512048989509777e3a16f612a7d4f0551d629a8239913577e192037935239888d8c66ae72df13be7947d5e2f4eee7b6b3a82cdcbb82e725
SSDEEP 3072:gNexIXVg04czVH2c7rY/yWA1t6RzQKL00vycfCnMcK6bqBCLfvhv6f4FKPsQ:gNexwy0/zI4E/zA1WzQDMYXFi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\devud lolabomoyiy-pim\zadud\20\nixevur\veyadat.pdb

kernel32

GetCommandLineW GetThreadContext lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW CreateActCtxW FindResourceExA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetLastError SetLastError GetProcAddress CreateNamedPipeA SetStdHandle SearchPathA GetNumberFormatW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent RaiseException CreateFileW CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_ce5524b77582e31c3c35e03476b31c78ca6a197ee31fb903058f4c90ccd4106f

kernel32

generic