JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d

General

Target
JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d
Size 285KB
Sample241230-133ems1mdn
SHA256 df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d
MD5 c2ce2df162edbe6d16c197dcce8461c1
SHA1 84d5e79aaef19c342d0f7e0f4c91a4c1446c0c55
SHA512 246688b91058703e24bafd27032e87f57041772ac4a44047c7a58be7c69141b1fd4d3eb443b8756c3aecd0a8de75949ec46f603f156a41afc54e5e37ce6e10b0
SSDEEP 6144:KubLIkGEMVyknC38e3qJL6b9OOhxxdeTr/ekI:KWchEMVykSoL61zxd6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d

File Explorer

JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d

.exe 285KB

JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d

IMPHASH 706e8fca63a8542d96f465de65ea2573
SHA256 df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d
MD5 c2ce2df162edbe6d16c197dcce8461c1
SHA1 84d5e79aaef19c342d0f7e0f4c91a4c1446c0c55
SHA512 246688b91058703e24bafd27032e87f57041772ac4a44047c7a58be7c69141b1fd4d3eb443b8756c3aecd0a8de75949ec46f603f156a41afc54e5e37ce6e10b0
SSDEEP 6144:KubLIkGEMVyknC38e3qJL6b9OOhxxdeTr/ekI:KWchEMVykSoL61zxd6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8475

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kufecayoyu\sufin1\biwawukeb.pdb

kernel32

GetCommandLineW HeapReAlloc GlobalDeleteAtom GetLocaleInfoA EndUpdateResourceW InterlockedIncrement AddConsoleAliasW SetEvent GetSystemTimeAsFileTime GetEnvironmentStrings GlobalAlloc LeaveCriticalSection GetFileAttributesA HeapCreate WriteConsoleW CreateActCtxA lstrlenW FlushFileBuffers GetProcAddress RemoveDirectoryA VerLanguageNameW EnumResourceTypesW GetModuleFileNameA DebugSetProcessKillOnExit GetModuleHandleA EraseTape ReleaseMutex FindFirstVolumeW GetCurrentProcessId FindNextVolumeA lstrcpyW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo VirtualFree VirtualAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount HeapSize GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_df04156566c9fa82a9ecfcc43911f845d2e7941ffda2daa63b1fa06743a38e8d

kernel32

generic