JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3

General

Target
JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3
Size 512KB
Sample250106-bh58cstldj
SHA256 e5e923e4bc5b56bc8d6c40da399419f959facc886c5264eb382af4eb17c316ef
MD5 05b3178700c7f8e60b17fbf3022a95b3
SHA1 3bfe1b561fb10ba2783dd9f3f28bbd97681e2e95
SHA512 f751aac881d27ea49f9a95a23fd52f15b1ef2bd16e9a4d5d0cb1ca306850cddad6c48bba13354e5306de300b6f5bbd8f8dd94453afaa16d910e406b36a9f930f
SSDEEP 6144:nydl2g9K7regCUSifuZYYrXxuwPn6PTQ096NLAdr3uuJ5hWtENnIADG8elO:nUl2gc6UOZYYrgwPncQ0kEdr3uuGGxD3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3

File Explorer

JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3

.exe 512KB

JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3

IMPHASH 96eae633c3835f4142e00d18fc3a156d
SHA256 e5e923e4bc5b56bc8d6c40da399419f959facc886c5264eb382af4eb17c316ef
MD5 05b3178700c7f8e60b17fbf3022a95b3
SHA1 3bfe1b561fb10ba2783dd9f3f28bbd97681e2e95
SHA512 f751aac881d27ea49f9a95a23fd52f15b1ef2bd16e9a4d5d0cb1ca306850cddad6c48bba13354e5306de300b6f5bbd8f8dd94453afaa16d910e406b36a9f930f
SSDEEP 6144:nydl2g9K7regCUSifuZYYrXxuwPn6PTQ096NLAdr3uuJ5hWtENnIADG8elO:nUl2gc6UOZYYrgwPncQ0kEdr3uuGGxD3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jopumezekove\pifof_zalebizutopoca_sojidasin80\wekemeya-no.pdb

kernel32

GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW SetEvent GetTickCount ReadConsoleW FindActCtxSectionStringA GlobalAlloc Sleep InitAtomTable FindNextVolumeW WriteConsoleW GetMailslotInfo CreateActCtxA SetConsoleTitleA SetTapePosition Module32First GetLastError GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA BeginUpdateResourceA GetProcessShutdownParameters LoadLibraryExA GetProcessAffinityMask GetCPInfoExA ReleaseMutex EndUpdateResourceA GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW GetModuleFileNameW HeapReAlloc EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind RaiseException SetStdHandle FlushFileBuffers GetStringTypeW HeapSize CreateFileW

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_05b3178700c7f8e60b17fbf3022a95b3

kernel32

gdi32

generic