JaffaCakes118_cb4d313e175da750a6a77df024b21a3a

General

Target
JaffaCakes118_cb4d313e175da750a6a77df024b21a3a
Size 582KB
Sample250109-skqdcsvmgp
SHA256 f91bfc64157a1a9090b0255cf0ca5f1eabeb4489d6422e32c5253f3d61d6dd3a
MD5 cb4d313e175da750a6a77df024b21a3a
SHA1 e34bd554a16fb07f259e6413f881c0a0b9f5cbf3
SHA512 80be454c5c313337bea4fd60f0e642cfd76cec6bbdb9a41a3f3d584d27f29e84c3e802c08c595e0cb81c2e1ee2e720a1e692af9168f0afdf0d0a450fc5708699
SSDEEP 12288:Qt4F0yi4xItk6aK/JlDRCYnyjaKDASBTDu6eMrMLN8IHI+m5n+5:QMvi4xF6au8YnasSNu1N8IHYW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_cb4d313e175da750a6a77df024b21a3a

File Explorer

JaffaCakes118_cb4d313e175da750a6a77df024b21a3a

.exe 582KB

JaffaCakes118_cb4d313e175da750a6a77df024b21a3a

IMPHASH 578dc7dab5389346cbcc286cae0d11e3
SHA256 f91bfc64157a1a9090b0255cf0ca5f1eabeb4489d6422e32c5253f3d61d6dd3a
MD5 cb4d313e175da750a6a77df024b21a3a
SHA1 e34bd554a16fb07f259e6413f881c0a0b9f5cbf3
SHA512 80be454c5c313337bea4fd60f0e642cfd76cec6bbdb9a41a3f3d584d27f29e84c3e802c08c595e0cb81c2e1ee2e720a1e692af9168f0afdf0d0a450fc5708699
SSDEEP 12288:Qt4F0yi4xItk6aK/JlDRCYnyjaKDASBTDu6eMrMLN8IHI+m5n+5:QMvi4xF6au8YnasSNu1N8IHYW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

412992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\revitulurulome\tuhoc32\nohalujigat\b.pdb

kernel32

SearchPathW InterlockedIncrement GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW CopyFileW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW SetCurrentDirectoryA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA WriteProfileSectionA CreateMemoryResourceNotification GlobalGetAtomNameA _hwrite LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc MoveFileA SetConsoleOutputCP WriteProfileSectionW GetProcessShutdownParameters FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime OutputDebugStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle WideCharToMultiByte InterlockedDecrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetAncestor

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_cb4d313e175da750a6a77df024b21a3a

kernel32

user32

winhttp

generic