c400da7d3b78ed5be349c884bc326780_JaffaCakes118

General

Target
c400da7d3b78ed5be349c884bc326780_JaffaCakes118
Size 406KB
Sample240404-2w5f4add64
SHA256 64335d170991053aa432dd2326936e3e7a81480fd3c1c4f8978a2a7abf32ac54
MD5 c400da7d3b78ed5be349c884bc326780
SHA1 3f3473024dfddb57639e03036fae156e4bd8a54f
SHA512 03152bf0d659af706c61f6f69aef2ef3f537e6e90ab1266783b9736621b2d5f71f4511909fae5500abc142e1d080a1d0b138ca1bb576d187b49ae063f9969a2c
SSDEEP 6144:zIzfx0tsmxGjd9suGjPIDhAJSbnVrw8/LppZ2oqIqOEhspJ:KfqOwGTlWgN0Qrw62obqap
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c400da7d3b78ed5be349c884bc326780_JaffaCakes118

File Explorer

c400da7d3b78ed5be349c884bc326780_JaffaCakes118

.exe 406KB

c400da7d3b78ed5be349c884bc326780_JaffaCakes118

IMPHASH 34fcf898593622d3ee58256a27253913
SHA256 64335d170991053aa432dd2326936e3e7a81480fd3c1c4f8978a2a7abf32ac54
MD5 c400da7d3b78ed5be349c884bc326780
SHA1 3f3473024dfddb57639e03036fae156e4bd8a54f
SHA512 03152bf0d659af706c61f6f69aef2ef3f537e6e90ab1266783b9736621b2d5f71f4511909fae5500abc142e1d080a1d0b138ca1bb576d187b49ae063f9969a2c
SSDEEP 6144:zIzfx0tsmxGjd9suGjPIDhAJSbnVrw8/LppZ2oqIqOEhspJ:KfqOwGTlWgN0Qrw62obqap
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\B\T\Acrobat\Installers\ShowAppPickerForPDF\Release\ShowAppPickerForPDF.pdb

kernel32

GetConsoleWindow OutputDebugStringW DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionEx GetLastError InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetCurrentProcess IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW

user32

ShowWindow GetDesktopWindow

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

ole32

CoInitializeEx CLSIDFromString CoCreateInstance CoAllowSetForegroundWindow

oleaut32

SysFreeString SysAllocString

vcruntime140

__current_exception_context _except_handler4_common __current_exception _CxxThrowException memset

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_exit _set_app_type _c_exit _register_thread_local_exe_atexit_callback exit _seh_filter_exe _cexit terminate _initterm_e _initterm _get_narrow_winmain_command_line _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _controlfp_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

c400da7d3b78ed5be349c884bc326780_JaffaCakes118

kernel32

user32

advapi32

ole32

oleaut32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic