JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0

General

Target
JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0
Size 595KB
Sample250101-1q673aymem
SHA256 efabe4bc1d40f2672a1c983a0f12845397818d49ca0eb6d1b42a8d3dc536ea28
MD5 60db5bf91d91d2fbbf1d381a24bf72f0
SHA1 a19e6b95c7d6cf36c6258dd7858a5af510dab8dd
SHA512 41455b9585769b22aafc9a071964065498442f783dbce1ae392b7fcab8ab67afccf62809c45819cec6a4c3b734944bf8eab21580d4af49a3af7441d362a3575a
SSDEEP 12288:WWzSHlz7Ono+03/DipslEuZzshIdC3zUeXDb7N2/DhD:Wb2nL0v5C4SwC3zU8b7eh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0

File Explorer

JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0

.exe 595KB

JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0

IMPHASH 6fad6017aa03f581d7f45aa76d8ddf02
SHA256 efabe4bc1d40f2672a1c983a0f12845397818d49ca0eb6d1b42a8d3dc536ea28
MD5 60db5bf91d91d2fbbf1d381a24bf72f0
SHA1 a19e6b95c7d6cf36c6258dd7858a5af510dab8dd
SHA512 41455b9585769b22aafc9a071964065498442f783dbce1ae392b7fcab8ab67afccf62809c45819cec6a4c3b734944bf8eab21580d4af49a3af7441d362a3575a
SSDEEP 12288:WWzSHlz7Ono+03/DipslEuZzshIdC3zUeXDb7N2/DhD:Wb2nL0v5C4SwC3zU8b7eh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9505

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW GetTickCount WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA QueryPerformanceFrequency ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_60db5bf91d91d2fbbf1d381a24bf72f0

kernel32

generic