JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96

General

Target
JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96
Size 788KB
Sample241230-2p154avnes
SHA256 02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96
MD5 b0e043d94593b2459502751296aa7238
SHA1 85e49aef5a8db20c695f6b0751f8f5941e45516c
SHA512 876859d3952bd62980196286859990d6fb2f4df6157d8e6331f1826b2bfe5112517b19df20b1e2b41295cea1ab93318815b7b9ee8e8ad2b97f2cb0b6abfecc33
SSDEEP 12288:c/x4fZLPczyPYqCeLwtvTq3hYre8BldAY1uhRF7rSrjjrWybwh:U6rczyPUeUct+8Y1abrSrjjrDwh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96

File Explorer

JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96

.exe 788KB

JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96

IMPHASH e358d30c2dc06052dc73bb8d4e25c1a4
SHA256 02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96
MD5 b0e043d94593b2459502751296aa7238
SHA1 85e49aef5a8db20c695f6b0751f8f5941e45516c
SHA512 876859d3952bd62980196286859990d6fb2f4df6157d8e6331f1826b2bfe5112517b19df20b1e2b41295cea1ab93318815b7b9ee8e8ad2b97f2cb0b6abfecc33
SSDEEP 12288:c/x4fZLPczyPYqCeLwtvTq3hYre8BldAY1uhRF7rSrjjrWybwh:U6rczyPUeUct+8Y1abrSrjjrDwh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20323

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tabi\leja\rofatohibujiv-wesok.pdb

kernel32

InterlockedIncrement OpenJobObjectA ZombifyActCtx GetConsoleAliasesA GetConsoleTitleA LoadLibraryW GetCalendarInfoW CreateEventA WriteConsoleW GetModuleFileNameW GetOverlappedResult FreeLibraryAndExitThread SetLastError GetProcAddress lstrcpynA CreateConsoleScreenBuffer WriteProfileSectionA LoadLibraryA WriteConsoleA LocalAlloc MoveFileA GetModuleFileNameA EnumDateFormatsW GetShortPathNameW GetLongPathNameA HeapSize GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc HeapCreate EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection IsProcessorFeaturePresent GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId CloseHandle ExitProcess WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RaiseException LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc SetFilePointer CreateFileW

ole32

OleInitialize

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_02d48a33caf84c8efead9fe15de41fef6a6fe33003848901c895de39e2cf4c96

kernel32

ole32

winhttp

generic