3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118

General

Target
3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118
Size 604KB
Sample240330-mdy42adh32
SHA256 69b266a06229673e16bacf6fa94ffb8b4d8b662cec510d4c210c512d47a80327
MD5 3a2ad0214792e9fe227f0f4506fb4a38
SHA1 3b07616a1935a1c2b0176d1093a9d304314895dc
SHA512 217af93bd6881fa6548dc1cf9d34d7e31e2af1f05126d0bed87df8b296a650df60eb378e0e76dc50e3a91b9181de838c689efcbfe3932f0e32b6c4c96b68dfa5
SSDEEP 12288:duIBkYwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbhW/:oob4wqyaDA5sTWiXT2tq07G2w/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118

File Explorer

3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118

.dll 604KB

3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118

IMPHASH 54afd981c141523b8c68b6a5bfed7202
SHA256 69b266a06229673e16bacf6fa94ffb8b4d8b662cec510d4c210c512d47a80327
MD5 3a2ad0214792e9fe227f0f4506fb4a38
SHA1 3b07616a1935a1c2b0176d1093a9d304314895dc
SHA512 217af93bd6881fa6548dc1cf9d34d7e31e2af1f05126d0bed87df8b296a650df60eb378e0e76dc50e3a91b9181de838c689efcbfe3932f0e32b6c4c96b68dfa5
SSDEEP 12288:duIBkYwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLbhW/:oob4wqyaDA5sTWiXT2tq07G2w/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

114752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\299_Flow\him\bell_opposite\order\Most.pdb

kernel32

FileTimeToLocalFileTime CreateEventW GetVersion FindClose FindNextFileW FindFirstFileW TlsAlloc GetCurrentDirectoryW VirtualProtectEx GetSystemDirectoryW FindFirstChangeNotificationW GetWindowsDirectoryW CompareStringW CompareStringA GetLocaleInfoW HeapSize GetTimeZoneInformation LCMapStringW LCMapStringA LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler RtlUnwind InitializeCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetStringTypeW MultiByteToWideChar GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID Sleep HeapAlloc GetLastError HeapFree InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetTimeFormatA GetDateFormatA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread GetACP GetOEMCP SetEnvironmentVariableA

user32

BeginDeferWindowPos DeferWindowPos GetPropW TranslateMessage UnregisterHotKey CreateMenu RegisterWindowMessageW

winscard

SCardReconnect SCardLocateCardsByATRW SCardListReaderGroupsW SCardIsValidContext SCardGetStatusChangeW SCardGetAttrib SCardEstablishContext SCardAccessStartedEvent SCardForgetReaderW SCardLocateCardsW SCardControl SCardListReadersW SCardIntroduceReaderGroupW SCardForgetReaderGroupW SCardDisconnect SCardAddReaderToGroupW SCardEndTransaction SCardBeginTransaction SCardRemoveReaderFromGroupW SCardReleaseStartedEvent SCardIntroduceReaderW SCardCancel SCardConnectW SCardLocateCardsA SCardReleaseContext

Sharing

General

Malware Config

Signatures

File Explorer

3a2ad0214792e9fe227f0f4506fb4a38_JaffaCakes118

kernel32

user32

winscard

generic