JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830

General

Target
JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830
Size 335KB
Sample241230-efl89axmct
SHA256 1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830
MD5 017583b1057e7938a8328077ea6798c9
SHA1 216cf9f3c20d94f1b61963e1a9bfc3bbfbe10148
SHA512 4b18b0cf7c43a66b8c77351ca96b992a89f0f8db0cebb3443cac413933921f44c48540729acbcf52617f901c6e873f368089febaeb0a937f8b4de97384eb1f63
SSDEEP 6144:VAlVbQ7oF8g8oGQtHsdVlZYtLQLyF1nRETd:mlh4oPbjtHsdV7sQLyLyT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830

File Explorer

JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830

.exe 335KB

JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830

IMPHASH 0da13809a194b2b672473d74453a5086
SHA256 1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830
MD5 017583b1057e7938a8328077ea6798c9
SHA1 216cf9f3c20d94f1b61963e1a9bfc3bbfbe10148
SHA512 4b18b0cf7c43a66b8c77351ca96b992a89f0f8db0cebb3443cac413933921f44c48540729acbcf52617f901c6e873f368089febaeb0a937f8b4de97384eb1f63
SSDEEP 6144:VAlVbQ7oF8g8oGQtHsdVlZYtLQLyF1nRETd:mlh4oPbjtHsdV7sQLyLyT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

102144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sic.pdb

kernel32

TlsGetValue SetDllDirectoryW InterlockedIncrement _lwrite ZombifyActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA SetHandleInformation SetConsoleScreenBufferSize CancelWaitableTimer SetVolumeMountPointW FindFirstFileExW FreeEnvironmentStringsA GetModuleHandleW GetSystemTimeAsFileTime GetPrivateProfileStringW ReadConsoleW GetWindowsDirectoryA GetSystemWow64DirectoryA QueryActCtxW GetSystemTimes GlobalAlloc GlobalFindAtomA LoadLibraryW ReadConsoleInputA SizeofResource SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW VerifyVersionInfoA GetModuleFileNameW GetConsoleAliasesLengthW CreateActCtxA CompareStringW GetACP GetStartupInfoW GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress SetFirmwareEnvironmentVariableW CreateNamedPipeA CopyFileA GlobalGetAtomNameA SearchPathA GetPrivateProfileStringA OpenWaitableTimerW WritePrivateProfileStringA GetModuleFileNameA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetProcessShutdownParameters BuildCommDCBA GetCurrentDirectoryA GetFileTime GetVersionExA FileTimeToLocalFileTime TlsFree GetProfileSectionW CommConfigDialogW GetSystemDirectoryA FindFirstChangeNotificationW DeleteFileA GetCommandLineA HeapSetInformation InterlockedDecrement DecodePointer ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW IsBadReadPtr TlsAlloc TlsSetValue HeapCreate GetOEMCP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar RaiseException SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree LCMapStringW GetStringTypeW FlushFileBuffers ReadFile SetStdHandle CloseHandle CreateFileW

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_1ac1ba9e387d088187f04697d6365f7b750d0883c82581d2aef0609c6060a830

kernel32

gdi32

generic