JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0

General

Target
JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0
Size 334KB
Sample241230-eajk6sxkdx
SHA256 932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0
MD5 db961867695b25febb937fcf6b3595eb
SHA1 583659154883a51674224ffec8cfb9df68fac90b
SHA512 f19079147170f3615bd67724b1a179a2c0eb259ca9343990573bdf54226548f611136228bc989d793c91a16bc637665663869037a24277cb361c7087bcafbf40
SSDEEP 6144:PrqoF5nyBcVI7ivrWNjDyYegF90xu2VqUGN1k6ELv1rXV:VnPprWhDyY7F9Mu2Vqfwr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0

File Explorer

JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0

.exe 334KB

JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0

IMPHASH f8a1a153568c8d0114bbef3bf9e0fd81
SHA256 932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0
MD5 db961867695b25febb937fcf6b3595eb
SHA1 583659154883a51674224ffec8cfb9df68fac90b
SHA512 f19079147170f3615bd67724b1a179a2c0eb259ca9343990573bdf54226548f611136228bc989d793c91a16bc637665663869037a24277cb361c7087bcafbf40
SSDEEP 6144:PrqoF5nyBcVI7ivrWNjDyYegF90xu2VqUGN1k6ELv1rXV:VnPprWhDyY7F9Mu2Vqfwr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

112800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vuwu\ciwepovuworej24\niy 6\dixes.pdb

kernel32

TerminateProcess GetExitCodeProcess GetVersionExA VerifyVersionInfoA CopyFileExA GetConsoleMode GetConsoleCP VerLanguageNameA GetDriveTypeW FindFirstChangeNotificationW FreeEnvironmentStringsW RequestWakeupLatency SetVolumeMountPointA GetLongPathNameA CopyFileW TlsGetValue GetConsoleCursorInfo LocalHandle SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar LocalUnlock GetNamedPipeHandleStateW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileA GetCommandLineW InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameA GetPrivateProfileStringA GetPrivateProfileIntA HeapSize GetProcessHeaps CreateNamedPipeA GetEnvironmentVariableA GetCPInfoExA GetSystemWindowsDirectoryA GetSystemWow64DirectoryA GetLastError WriteProfileSectionW GetCalendarInfoA SetLastError GetExitCodeThread WaitForDebugEvent ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange SetConsoleTitleW DefineDosDeviceW LoadLibraryW WritePrivateProfileStringW WaitNamedPipeW InterlockedIncrement SetConsoleMode PeekConsoleInputA GetNumberFormatA CreateSemaphoreW LoadModule FindFirstVolumeW GetPrivateProfileSectionNamesW EnumTimeFormatsA SetLocalTime CreateSemaphoreA FindNextFileA FindFirstFileW FreeEnvironmentStringsA OutputDebugStringA lstrcpyW HeapSetInformation CreateHardLinkW RaiseException GetSystemTime UnlockFile EnumCalendarInfoExA MoveFileExA SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputA LocalLock SetCommState EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreA GetLargestConsoleWindowSize GetProfileStringA ZombifyActCtx GetVolumePathNamesForVolumeNameW EnumDateFormatsW SetSystemTimeAdjustment OpenMutexW GetComputerNameA HeapCompact CommConfigDialogA OpenMutexA GetStringTypeA SetSystemPowerState FindResourceA DeleteTimerQueueTimer EnumResourceNamesW CreateTimerQueueTimer GetProcessTimes UnregisterWait IsBadReadPtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe WriteConsoleOutputAttribute GetCompressedFileSizeA SetFileShortNameA GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA EnumDateFormatsA TerminateJobObject QueryDosDeviceW LeaveCriticalSection GetBinaryTypeW SetCurrentDirectoryA CloseHandle GetFullPathNameW OpenFileMappingA EncodePointer DecodePointer GetStartupInfoW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW ExitProcess HeapValidate EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree SetFilePointer WideCharToMultiByte WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers SetStdHandle CreateFileW

user32

GetMenuItemID GetCursorInfo

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_932ba2f5b02919626625a80b1853c40b664c5e19aa5a43dbaf4825e6ff84d8a0

kernel32

user32

gdi32

generic