022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118

General

Target
022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118
Size 100KB
Sample240328-lffvssfb46
SHA256 546b4c7d6b3692a56bf4a76be418f60363105a2611194ae3a1ae0e02eacede57
MD5 022dc0aa4834800b11017bf9ab574e5a
SHA1 dec98346de129ffb93975aaa6c8d941462f5ac40
SHA512 9f69e6b9f59e55d59049c93f87e9e335e9443ed4af2778b1640f9717420faf4acf03b66a4ec5f5e55e6729dc72a771dd4dedc8e52e518008e1fe6cfc27625e9c
SSDEEP 3072:nMSncRzAOMuy/TAGo2WHDy3bCjtN5npxAv:MSncRlMuyrRWG3bAJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118

File Explorer

022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118

.exe 100KB

022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118

IMPHASH 9222d372923baed7aa9dfa28449a94ea
SHA256 546b4c7d6b3692a56bf4a76be418f60363105a2611194ae3a1ae0e02eacede57
MD5 022dc0aa4834800b11017bf9ab574e5a
SHA1 dec98346de129ffb93975aaa6c8d941462f5ac40
SHA512 9f69e6b9f59e55d59049c93f87e9e335e9443ed4af2778b1640f9717420faf4acf03b66a4ec5f5e55e6729dc72a771dd4dedc8e52e518008e1fe6cfc27625e9c
SSDEEP 3072:nMSncRzAOMuy/TAGo2WHDy3bCjtN5npxAv:MSncRlMuyrRWG3bAJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb

kernel32

CreateFileA FindResourceA FreeLibrary LoadResource WriteFile SizeofResource GetProcAddress LoadLibraryA LockResource EnumResourceNamesA CloseHandle FreeResource GetWindowsDirectoryA OutputDebugStringA GetTempPathA GetModuleHandleW ExitProcess DecodePointer EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameW Sleep HeapSize GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

022dc0aa4834800b11017bf9ab574e5a_JaffaCakes118

kernel32

shell32

generic