JaffaCakes118_b80dbd2f2d2604242344a90860718718

General

Target
JaffaCakes118_b80dbd2f2d2604242344a90860718718
Size 512KB
Sample250109-cdxabssre1
SHA256 2724e216710da4a288b8fbb671df2a7f9c446655df869601bc463a0c6c124564
MD5 b80dbd2f2d2604242344a90860718718
SHA1 115db4afdb61dc554d84cbbbef745f23c5534919
SHA512 bba06b97e1c085f2124ac16c52c171438f1356138ab99cf86c6cb2f76a9660cdb28d3cae9d1202bae704e91f91766759aa0bfd3684e7bfd7a03484e0f084b567
SSDEEP 12288:fkuuSPyFkFFOpNf4hiGW1jQK2kAwGpIwZGEX8cI:ftlGki4h0QK2HVsEC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b80dbd2f2d2604242344a90860718718

File Explorer

JaffaCakes118_b80dbd2f2d2604242344a90860718718

.exe 512KB

JaffaCakes118_b80dbd2f2d2604242344a90860718718

IMPHASH df9601abec2416ae7ecc0dd0d7272e84
SHA256 2724e216710da4a288b8fbb671df2a7f9c446655df869601bc463a0c6c124564
MD5 b80dbd2f2d2604242344a90860718718
SHA1 115db4afdb61dc554d84cbbbef745f23c5534919
SHA512 bba06b97e1c085f2124ac16c52c171438f1356138ab99cf86c6cb2f76a9660cdb28d3cae9d1202bae704e91f91766759aa0bfd3684e7bfd7a03484e0f084b567
SSDEEP 12288:fkuuSPyFkFFOpNf4hiGW1jQK2kAwGpIwZGEX8cI:ftlGki4h0QK2HVsEC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8483

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zoxuwiki\voveka.pdb

kernel32

EndUpdateResourceW GetEnvironmentStringsW SetEvent FlushViewOfFile ReadConsoleW GlobalAlloc Sleep InitAtomTable HeapCreate WriteConsoleW GetAtomNameW GetModuleFileNameW CreateActCtxA SetConsoleTitleA SetProcessAffinityMask DeactivateActCtx SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW LoadLibraryA SetEnvironmentVariableA GetModuleFileNameA GetOEMCP CreateIoCompletionPort GetCPInfoExA SetProcessShutdownParameters Module32Next ReleaseMutex GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW SetTapePosition HeapReAlloc IsProcessorFeaturePresent RaiseException EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind SetStdHandle FlushFileBuffers GetStringTypeW HeapSize CreateFileW

user32

ClientToScreen

gdi32

GetBitmapBits

winhttp

WinHttpQueryOption

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_b80dbd2f2d2604242344a90860718718

kernel32

user32

gdi32

winhttp

generic