JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24

General

Target
JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24
Size 247KB
Sample241230-af35js1nfm
SHA256 7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24
MD5 d23ae6b656e69571bec33d1d66040b62
SHA1 7fbbda8293662d9ea6c6ce5e93a3f87e6d309ab4
SHA512 9f8f4ba57ef42855038e670a858ff67d9aea9543199cc8028ee1c17d3a3bda389fe15e0f106342cd3f9657f6201d28ac580a039d74b74da09935353c614cadd9
SSDEEP 6144:/LHu867AvjovMgt2tJdzPUywFsDYjOuzbgwu6QigabwVf:K867vltUJdzcywFqunn5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24

File Explorer

JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24

.exe 247KB

JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24

IMPHASH c8725b7ab8753c936cc4c98a181b2488
SHA256 7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24
MD5 d23ae6b656e69571bec33d1d66040b62
SHA1 7fbbda8293662d9ea6c6ce5e93a3f87e6d309ab4
SHA512 9f8f4ba57ef42855038e670a858ff67d9aea9543199cc8028ee1c17d3a3bda389fe15e0f106342cd3f9657f6201d28ac580a039d74b74da09935353c614cadd9
SSDEEP 6144:/LHu867AvjovMgt2tJdzPUywFsDYjOuzbgwu6QigabwVf:K867vltUJdzcywFqunn5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nap66\tayozinalexule94\dezur.pdb

kernel32

HeapCompact CommConfigDialogA GetSystemWindowsDirectoryW QueryPerformanceCounter GetEnvironmentStringsW SetConsoleScreenBufferSize AddConsoleAliasW BackupSeek GetTickCount GetSystemTimeAsFileTime ReadConsoleW FindActCtxSectionStringA SizeofResource GetProcessHandleCount FindNextVolumeW HeapValidate GetAtomNameW GetModuleFileNameW GetLastError GetProcAddress VirtualAlloc GetFirmwareEnvironmentVariableW LoadLibraryA WriteConsoleA LocalAlloc BeginUpdateResourceA GetDefaultCommConfigA SetConsoleCursorInfo GetProcessAffinityMask LCMapStringW lstrcpyA CreateFileW WriteConsoleW HeapAlloc EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer HeapFree CloseHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentProcessId LoadLibraryW HeapReAlloc RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RaiseException IsProcessorFeaturePresent MultiByteToWideChar GetStringTypeW

user32

MessageBeep

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_7ce7daef52a1c8726226d122f5f8c9233125559a520122df725a9cc95c92bb24

kernel32

user32

generic