JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68

General

Target
JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68
Size 366KB
Sample250101-mgl9msvlgr
SHA256 097cdcb61791ff377817655d9b3796e81b9527fb2cf28a8cb18a870fbdb9e209
MD5 517a9a6270c0b8dcde71dbd77f3b9f68
SHA1 70872b6790dc0d937f622b0c160e4067440a98f9
SHA512 7757c8777e1e0bfa4bd922f542d7b4b4d636cf7b7643738f6fd46f86a94140a5ed5e6395e603aca29eefad074e2b3f9488ddd9e6a6b4eb7eb097c1d4e274776d
SSDEEP 6144:Wo1Ja1/djGKMlFkkP4zHDPBDiX2Mo0NbtQI/WJVNGAO8zdv15MD:Tad5cFkTXPBD6FtQI/WpGAOulED
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68

File Explorer

JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68

.exe 366KB

JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68

IMPHASH 470518591ed4a5fa094199423463cb10
SHA256 097cdcb61791ff377817655d9b3796e81b9527fb2cf28a8cb18a870fbdb9e209
MD5 517a9a6270c0b8dcde71dbd77f3b9f68
SHA1 70872b6790dc0d937f622b0c160e4067440a98f9
SHA512 7757c8777e1e0bfa4bd922f542d7b4b4d636cf7b7643738f6fd46f86a94140a5ed5e6395e603aca29eefad074e2b3f9488ddd9e6a6b4eb7eb097c1d4e274776d
SSDEEP 6144:Wo1Ja1/djGKMlFkkP4zHDPBDiX2Mo0NbtQI/WJVNGAO8zdv15MD:Tad5cFkTXPBD6FtQI/WpGAOulED
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

174912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kanozorof-vogemimuz.pdb

kernel32

ExitProcess FileTimeToDosDateTime CreateTimerQueue InterlockedIncrement FlushViewOfFile OutputDebugStringW GetProcessPriorityBoost GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent IsBadReadPtr GetConsoleAliasesLengthA CreateActCtxW GlobalAlloc SetFileShortNameW GetSystemTimeAdjustment GetVersionExW GetEnvironmentVariableA CompareStringW lstrlenW GetStartupInfoW FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA CopyFileA CreateMemoryResourceNotification SearchPathA _hwrite OpenWaitableTimerA OpenMutexA RegisterWaitForSingleObject OpenWaitableTimerW SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW FillConsoleOutputAttribute GetCurrentDirectoryA CompareStringA GetVersionExA AddConsoleAliasA DeleteFileA CloseHandle CreateFileW SetStdHandle GetConsoleMode GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedDecrement DecodePointer GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW WideCharToMultiByte LCMapStringW IsProcessorFeaturePresent RaiseException SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetMessagePos

winhttp

WinHttpQueryOption

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_517a9a6270c0b8dcde71dbd77f3b9f68

kernel32

user32

winhttp

generic