JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1

General

Target
JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1
Size 271KB
Sample241230-dp26dswngm
SHA256 b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1
MD5 9ae78f053aae1b5679c107ed4f82d88f
SHA1 d72d9f05b16847980c9f1eee05b921d8a426ff5b
SHA512 fe10c528f9c03203540a5c605da73c833a20e4315320dc4448e73d782b19ea3efcc9f545325268df4aac3ff7dff433bb0321bb2351be528bfaa2bb946dfcb0d5
SSDEEP 6144:RnhFX60LF+3XXouScjVkARRROhxxpeTr/ekI:ljXFc3XY5M6Aczxp6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1

File Explorer

JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1

.exe 271KB

JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1

IMPHASH c15bb6cf111ec297d5d1e54944f0caf3
SHA256 b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1
MD5 9ae78f053aae1b5679c107ed4f82d88f
SHA1 d72d9f05b16847980c9f1eee05b921d8a426ff5b
SHA512 fe10c528f9c03203540a5c605da73c833a20e4315320dc4448e73d782b19ea3efcc9f545325268df4aac3ff7dff433bb0321bb2351be528bfaa2bb946dfcb0d5
SSDEEP 6144:RnhFX60LF+3XXouScjVkARRROhxxpeTr/ekI:ljXFc3XY5M6Aczxp6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yigalo33\vejix17 luxiwece fof\yebonewojume11\yih\horavezoh.pdb

kernel32

HeapReAlloc GlobalDeleteAtom GetLocaleInfoA InterlockedIncrement GetQueuedCompletionStatus GetEnvironmentStringsW SetEvent ReadConsoleW GetCommandLineA CreateActCtxW GlobalAlloc CopyFileW FreeConsole LeaveCriticalSection HeapCreate GetFileAttributesW WriteConsoleW GetModuleFileNameW lstrlenW SetConsoleTitleA FlushFileBuffers DeactivateActCtx InterlockedExchange GetProcAddress BeginUpdateResourceW RemoveDirectoryA VerLanguageNameW LocalAlloc SetConsoleWindowInfo GetTapeParameters SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA EraseTape VirtualProtect EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW FindNextVolumeA lstrcpyW GetConsoleOutputCP WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW VirtualFree VirtualAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LoadLibraryA GetLocaleInfoW SetEndOfFile GetProcessHeap ReadFile WriteConsoleA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_b96c44175c196165d390f714e2f47bf188a355293dcb8c6b6b3b09e3a457d4e1

kernel32

generic