JaffaCakes118_a8bab26653175f6041d559566da78bc9

General

Target
JaffaCakes118_a8bab26653175f6041d559566da78bc9
Size 542KB
Sample250108-yjbfpstjdn
SHA256 5f8f536ed1875a9000e95124de673130eeb923b096bef5365a1d3302978cca26
MD5 a8bab26653175f6041d559566da78bc9
SHA1 1015bbe13cb1a6c499f6fa973ba7b9d426abad2f
SHA512 5f5b52678fab358d9f58800b6f6c09c686a2da773562d89f0fbee8339ff599050bb9637d65ff0d3c519bcda88644dcf31fe198105611d8b7bfd1e594000b4e67
SSDEEP 12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGT:93j5K901WfAQOs/9T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a8bab26653175f6041d559566da78bc9

File Explorer

JaffaCakes118_a8bab26653175f6041d559566da78bc9

.exe 542KB

JaffaCakes118_a8bab26653175f6041d559566da78bc9

IMPHASH 688914c09063324d2ce71db515e11995
SHA256 5f8f536ed1875a9000e95124de673130eeb923b096bef5365a1d3302978cca26
MD5 a8bab26653175f6041d559566da78bc9
SHA1 1015bbe13cb1a6c499f6fa973ba7b9d426abad2f
SHA512 5f5b52678fab358d9f58800b6f6c09c686a2da773562d89f0fbee8339ff599050bb9637d65ff0d3c519bcda88644dcf31fe198105611d8b7bfd1e594000b4e67
SSDEEP 12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGT:93j5K901WfAQOs/9T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

354032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tar\46\huwoh\gabup\tir\sovapuledayami-yajiseju_59\xu.pdb

kernel32

ExitProcess GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW InterlockedDecrement AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetTickCount GenerateConsoleCtrlEvent SetFileShortNameW LoadLibraryW SetSystemTimeAdjustment GetModuleFileNameW CreateActCtxA CompareStringW lstrlenW GetStartupInfoW OpenMutexW FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW SearchPathA _hwrite OpenWaitableTimerA RegisterWaitForSingleObject OpenWaitableTimerW LocalAlloc SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer GetModuleHandleW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW WideCharToMultiByte LCMapStringW IsProcessorFeaturePresent RaiseException SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessagePos

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a8bab26653175f6041d559566da78bc9

kernel32

user32

generic