5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118

General

Target
5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118
Size 604KB
Sample240331-wrxb2agd8v
SHA256 88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
MD5 5a5bbd8c04147c15575a07e24bdef22e
SHA1 e4506ef09698fb678f9e11190723499e0ee3b0a7
SHA512 11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
SSDEEP 12288:uuIBfTwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLb2W/:J6b4wqyaDA5sTWiXT2tq07G2L/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118

File Explorer

5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118

.dll 604KB

5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118

IMPHASH 54afd981c141523b8c68b6a5bfed7202
SHA256 88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31
MD5 5a5bbd8c04147c15575a07e24bdef22e
SHA1 e4506ef09698fb678f9e11190723499e0ee3b0a7
SHA512 11eeabbec6979fadd57d7c8834574b929abdf671d418044042dae8f2e0a24ebeb68a5876eb6394b720c5ae8858792ea8515926d13e1cf4b5a3bd390caabd818c
SSDEEP 12288:uuIBfTwMtjp4CqwqyaXPLAfx38TW9DiWUT2tq017JGoLb2W/:J6b4wqyaDA5sTWiXT2tq07G2L/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

114752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\299_Flow\him\bell_opposite\order\Most.pdb

kernel32

FileTimeToLocalFileTime CreateEventW GetVersion FindClose FindNextFileW FindFirstFileW TlsAlloc GetCurrentDirectoryW VirtualProtectEx GetSystemDirectoryW FindFirstChangeNotificationW GetWindowsDirectoryW CompareStringW CompareStringA GetLocaleInfoW HeapSize GetTimeZoneInformation LCMapStringW LCMapStringA LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler RtlUnwind InitializeCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetStringTypeW MultiByteToWideChar GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID Sleep HeapAlloc GetLastError HeapFree InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetTimeFormatA GetDateFormatA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread GetACP GetOEMCP SetEnvironmentVariableA

user32

BeginDeferWindowPos DeferWindowPos GetPropW TranslateMessage UnregisterHotKey CreateMenu RegisterWindowMessageW

winscard

SCardReconnect SCardLocateCardsByATRW SCardListReaderGroupsW SCardIsValidContext SCardGetStatusChangeW SCardGetAttrib SCardEstablishContext SCardAccessStartedEvent SCardForgetReaderW SCardLocateCardsW SCardControl SCardListReadersW SCardIntroduceReaderGroupW SCardForgetReaderGroupW SCardDisconnect SCardAddReaderToGroupW SCardEndTransaction SCardBeginTransaction SCardRemoveReaderFromGroupW SCardReleaseStartedEvent SCardIntroduceReaderW SCardCancel SCardConnectW SCardLocateCardsA SCardReleaseContext

Sharing

General

Malware Config

Signatures

File Explorer

5a5bbd8c04147c15575a07e24bdef22e_JaffaCakes118

kernel32

user32

winscard

generic