JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185

General

Target
JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185
Size 781KB
Sample250111-dd219asrcr
SHA256 5452492faf9dddebb689c54a2f2d932de2a2b6e17e03d1c2c91f3afdc89ed164
MD5 f510384bacc30d8c4fb9e7b69d65b185
SHA1 56f69e4ccafc32d278781c3494a43e132f63868b
SHA512 2a1dedc0bfa5a7520d1842ec39a964ab9d34625efef22be315720a260ac695832a862ab6357f7d9490da7308fb52c898592e9b04f1f7006f31c4b71bd1c4a333
SSDEEP 12288:JKpD2QkyuNMX/HiKt6LAQF/bRBlB3BgxAoIaRYHk2gIkXYbsqLMxD:JwSQkLNM/i86cQ5NBl7gxpdwfbsqLM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185

File Explorer

JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185

.exe 781KB

JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185

IMPHASH 9115aec50d0406ea6456e4eb34e47f05
SHA256 5452492faf9dddebb689c54a2f2d932de2a2b6e17e03d1c2c91f3afdc89ed164
MD5 f510384bacc30d8c4fb9e7b69d65b185
SHA1 56f69e4ccafc32d278781c3494a43e132f63868b
SHA512 2a1dedc0bfa5a7520d1842ec39a964ab9d34625efef22be315720a260ac695832a862ab6357f7d9490da7308fb52c898592e9b04f1f7006f31c4b71bd1c4a333
SSDEEP 12288:JKpD2QkyuNMX/HiKt6LAQF/bRBlB3BgxAoIaRYHk2gIkXYbsqLMxD:JwSQkLNM/i86cQ5NBl7gxpdwfbsqLM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lulirayazu-kumomofezupi71-zoj-xegiki19\xurukorayiw-boloketi-x.pdb

kernel32

GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW SetEvent GetTickCount ReadConsoleW FindActCtxSectionStringA GlobalAlloc Sleep InitAtomTable HeapCreate FindNextVolumeW WriteConsoleW GetMailslotInfo CreateActCtxA SetConsoleTitleA SetTapePosition Module32First SetLastError GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA BeginUpdateResourceA GetProcessShutdownParameters GetProcessAffinityMask GetCPInfoExA ReleaseMutex EndUpdateResourceA GetVersionExA FindNextVolumeA lstrcpyW GetModuleFileNameW HeapReAlloc EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind RaiseException SetStdHandle FlushFileBuffers LCMapStringW GetStringTypeW HeapSize CreateFileW

gdi32

GetBitmapBits

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_f510384bacc30d8c4fb9e7b69d65b185

kernel32

gdi32

generic