JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

General

Target
JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff
Size 593KB
Sample250106-25xgvatrep
SHA256 1a1eba19f1b9bc5eb62e70dfeda11fb27f7f79bb4c0aa3936d4e982bc0af41c1
MD5 3fe8d0799c7f1c0991ce653727f9fcff
SHA1 528b656a541e239aeed45cf66e95213a747ed7f7
SHA512 4940b0988e7b6900832fdfe9484532f3857c667c447a0f94dcc1c32c82dfec73656cc7f495faca4dd3ae31e6ff5773b44f0c570fd5f5783b2548745d6218fc11
SSDEEP 12288:4ujF6R3CENKFa4DX8gG7MR/1crZMMhEkdorPrCiktL9SY9XcV:4nR3PNKV4gGoCZ5E/Cikt7cV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

File Explorer

JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

.exe 593KB

JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

IMPHASH bd3694527adf0e2f58ae8cb4e18ad5ae
SHA256 1a1eba19f1b9bc5eb62e70dfeda11fb27f7f79bb4c0aa3936d4e982bc0af41c1
MD5 3fe8d0799c7f1c0991ce653727f9fcff
SHA1 528b656a541e239aeed45cf66e95213a747ed7f7
SHA512 4940b0988e7b6900832fdfe9484532f3857c667c447a0f94dcc1c32c82dfec73656cc7f495faca4dd3ae31e6ff5773b44f0c570fd5f5783b2548745d6218fc11
SSDEEP 12288:4ujF6R3CENKFa4DX8gG7MR/1crZMMhEkdorPrCiktL9SY9XcV:4nR3PNKV4gGoCZ5E/Cikt7cV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

412304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zesisan\fusoyiju\miwumaje\bofunapimodul79\hoyihavaca\hehowax.pdb

kernel32

SearchPathW InterlockedDecrement FindFirstFileExW GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA WriteProfileSectionA CopyFileA CreateMemoryResourceNotification GlobalGetAtomNameA _hwrite LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc MoveFileA GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime OutputDebugStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW WideCharToMultiByte InterlockedIncrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

kernel32

user32

generic