JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b

General

Target
JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b
Size 284KB
Sample250107-acdeqawncm
SHA256 6f33157f6cb11b56825af6bcae539938574116e59a4b95c1e90c8560e386d2b1
MD5 421baa0323a230ca71d7ab70ec63ee8b
SHA1 ff65959682ba1f90605c0656c3b27ddd32a02abe
SHA512 7bdb8c712a5bb739c8c428fef98fe4accb1d183a6dab23c0885a70fe2ac7d495a9208ece7a8fad56df2808da485760b54336a4d46813ccf7de4c038b3c7397eb
SSDEEP 6144:ynkNfhTgg/aHh/cXG7qU/YvGbEFy5pIV0y0tLojI0z7v:KkxGpBWWzgvQdpol0tLoTX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b

File Explorer

JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b

.exe 284KB

JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b

IMPHASH 0aa8675e96bbc2351e2af940f447c93e
SHA256 6f33157f6cb11b56825af6bcae539938574116e59a4b95c1e90c8560e386d2b1
MD5 421baa0323a230ca71d7ab70ec63ee8b
SHA1 ff65959682ba1f90605c0656c3b27ddd32a02abe
SHA512 7bdb8c712a5bb739c8c428fef98fe4accb1d183a6dab23c0885a70fe2ac7d495a9208ece7a8fad56df2808da485760b54336a4d46813ccf7de4c038b3c7397eb
SSDEEP 6144:ynkNfhTgg/aHh/cXG7qU/YvGbEFy5pIV0y0tLojI0z7v:KkxGpBWWzgvQdpol0tLoTX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

102800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jiw64\saxe35_ku.pdb

kernel32

SearchPathW GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc SetFileShortNameW GetConsoleMode TerminateThread GetVersionExW IsBadWritePtr GetEnvironmentVariableA CompareStringW ExitThread lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress CopyFileA LockFileEx OpenWaitableTimerA ProcessIdToSessionId MoveFileA SetCurrentDirectoryW WriteProfileSectionW GlobalGetAtomNameW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW ScrollConsoleScreenBufferA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA HeapValidate IsBadReadPtr RaiseException Sleep InterlockedIncrement ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_421baa0323a230ca71d7ab70ec63ee8b

kernel32

winhttp

generic