JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

General

Target
JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7
Size 585KB
Sample250109-e9jp8ayme1
SHA256 a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b
MD5 bdc6b21531065259073f1a9afc6bebf7
SHA1 98645de89bd1d4381924c8a6f3b8ec388c5b829e
SHA512 c317f103096258c1344f2678ae0982b875de8faf169c0d6878524c2718f9326762923b729fdde474ef643dd95a7aa10c62560708facd4fc168635a0fc11cbedb
SSDEEP 12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8d:Ul00+SUdN2ufe6JQmLgRvIoJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

File Explorer

JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

.exe 585KB

JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

IMPHASH 234ea21b80fd8aa2e90c689371683378
SHA256 a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b
MD5 bdc6b21531065259073f1a9afc6bebf7
SHA1 98645de89bd1d4381924c8a6f3b8ec388c5b829e
SHA512 c317f103096258c1344f2678ae0982b875de8faf169c0d6878524c2718f9326762923b729fdde474ef643dd95a7aa10c62560708facd4fc168635a0fc11cbedb
SSDEEP 12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8d:Ul00+SUdN2ufe6JQmLgRvIoJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

394480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gowakoki\hexit.pdb

kernel32

FindFirstChangeNotificationW TlsGetValue GetCPInfo InterlockedDecrement BackupSeek GetModuleHandleW GetTickCount GetCurrentThread IsBadReadPtr GetConsoleAliasesLengthA SetFileTime CreateActCtxW GlobalAlloc SetFileShortNameW CopyFileW SetConsoleMode VerifyVersionInfoA TerminateProcess CompareStringW lstrlenW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW SetLastError GetProcAddress LockFileEx OpenWaitableTimerA WriteProfileSectionW GlobalGetAtomNameW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW ScrollConsoleScreenBufferA SetProcessShutdownParameters GetVersionExA TlsAlloc DeleteFileW AddConsoleAliasA LocalFileTimeToFileTime InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetCommandLineA HeapValidate RaiseException RtlUnwind WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW TlsSetValue GetCurrentThreadId TlsFree ExitProcess GetACP GetOEMCP IsValidCodePage DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP GetLocaleInfoW CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

kernel32

generic