JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

General

Target
JaffaCakes118_268e78c02a927e1fd332ff635531a2d1
Size 512KB
Sample241231-tepejsxpdv
SHA256 68e3a142910403d6d8a6fd941427f0060c18e8f30550b5fe8f4a3ff2ca4992de
MD5 268e78c02a927e1fd332ff635531a2d1
SHA1 20c5ad9e64946cf7285d6eda62075759c618343a
SHA512 13f55ae5c61360daac961b5698a0c13687b6887a94c4538167436549172213eb5c097c4a6d0ca352936bde4f2ec7fe795607f8fec5859028faa5bea092ca3fa4
SSDEEP 12288:rr/yVKswDetV/7Ve9FkVkXatOXDvjquxZzUA:XNYNZejk0lDBZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

File Explorer

JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

.exe 512KB

JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

IMPHASH b2b1ce057c4a3ad8c1ee685e46521866
SHA256 68e3a142910403d6d8a6fd941427f0060c18e8f30550b5fe8f4a3ff2ca4992de
MD5 268e78c02a927e1fd332ff635531a2d1
SHA1 20c5ad9e64946cf7285d6eda62075759c618343a
SHA512 13f55ae5c61360daac961b5698a0c13687b6887a94c4538167436549172213eb5c097c4a6d0ca352936bde4f2ec7fe795607f8fec5859028faa5bea092ca3fa4
SSDEEP 12288:rr/yVKswDetV/7Ve9FkVkXatOXDvjquxZzUA:XNYNZejk0lDBZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

353632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vuje94\noyefigagiguwa.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA GlobalAlloc SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile GetACP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

kernel32

user32

generic