JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb

General

Target
JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb
Size 234KB
Sample241230-e63zpaykdl
SHA256 548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb
MD5 8c7a19e279b6a8669251eca874339471
SHA1 130983b4e6961e673c092a78d6c8508cc4106c92
SHA512 47e953b9296caf050f2c4e90ca8f2b3bcc4798d0b060a8675c6face0550925c206726da20e8f2c4a97dab87cd35bb65f0ae4e3696ad690b122e856e94172fc0b
SSDEEP 6144:bZRil6yf92g8+IU9XLBuzbgwujigaLwVf:bZRioyf8gxIUlBunnb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb

File Explorer

JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb

.exe 234KB

JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb

IMPHASH 959e3f7a6ddd7b4ec96854ed6fe13765
SHA256 548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb
MD5 8c7a19e279b6a8669251eca874339471
SHA1 130983b4e6961e673c092a78d6c8508cc4106c92
SHA512 47e953b9296caf050f2c4e90ca8f2b3bcc4798d0b060a8675c6face0550925c206726da20e8f2c4a97dab87cd35bb65f0ae4e3696ad690b122e856e94172fc0b
SSDEEP 6144:bZRil6yf92g8+IU9XLBuzbgwujigaLwVf:bZRioyf8gxIUlBunnb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\goweve_wawosa-gurugaco\kak_zixopuyisewi\zelopug.pdb

kernel32

CommConfigDialogA GetDefaultCommConfigW GetSystemWindowsDirectoryW QueryPerformanceCounter GetEnvironmentStringsW SetConsoleScreenBufferSize BackupSeek GetTickCount GetProcessHeap GetSystemTimeAsFileTime ReadConsoleW SizeofResource GetProcessHandleCount InitAtomTable HeapValidate GetModuleFileNameW DeactivateActCtx GetLastError GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW GetFirmwareEnvironmentVariableW GetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetProcessAffinityMask GetConsoleCursorInfo DeleteAtom AddConsoleAliasA FindNextVolumeA LCMapStringW lstrcpyA WriteConsoleW CreateFileW EncodePointer DecodePointer HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc Sleep GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer HeapCreate HeapFree CloseHandle WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentProcessId LoadLibraryW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeW

user32

MessageBeep

advapi32

AdjustTokenGroups

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_548f5ce73f4e42e6912d1ffcc66b50d987e5b6dd90ce63f0c3feb6d68cfe0fbb

kernel32

user32

advapi32

generic