ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118
Size 148KB
Sample240404-rp2fraaa91
SHA256 2b44a032c10aa4318ec524592d6bb60f2853d2060474bbf2b18c915a3454ef8f
MD5 ba9cf73fb40a8d21912e5859ca0bb1ed
SHA1 806467a7a19ed5fa8e0438b4c73f54da00de0723
SHA512 7669c8924c9eb827b09a29cd6a829a228549b723a5771efef4e6f5eaf3d44ffa1172d6fd83471d22c4402457085d583419e7e25c04824996ad7022d465bcdc85
SSDEEP 1536:pv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:I/dwh9uu39N81SbxthE8vCO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118

File Explorer

ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118

.exe 148KB

ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118

IMPHASH 5b509220cd547c39018121b39128d48d
SHA256 2b44a032c10aa4318ec524592d6bb60f2853d2060474bbf2b18c915a3454ef8f
MD5 ba9cf73fb40a8d21912e5859ca0bb1ed
SHA1 806467a7a19ed5fa8e0438b4c73f54da00de0723
SHA512 7669c8924c9eb827b09a29cd6a829a228549b723a5771efef4e6f5eaf3d44ffa1172d6fd83471d22c4402457085d583419e7e25c04824996ad7022d465bcdc85
SSDEEP 1536:pv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:I/dwh9uu39N81SbxthE8vCO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

50103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetSystemWindowsDirectoryA CompareStringW lstrcmpW SetLastError InitializeCriticalSectionAndSpinCount CreateSemaphoreW CreateEventW ReleaseSemaphore LockResource LoadResource FindClose FindFirstFileW CreateProcessW DebugBreak GetThreadContext VirtualAlloc VirtualQuery GetVersion FreeLibraryAndExitThread SetThreadPriority GetCurrentThread CreateThread CloseHandle CreateEventA SetEvent ResetEvent HeapCreate HeapDestroy HeapAlloc HeapFree lstrlenW DuplicateHandle GetLocalTime WaitForSingleObject OutputDebugStringA RaiseException QueueUserWorkItem CreateTimerQueueTimer CopyFileW TlsFree lstrcmpiA GetExitCodeProcess CreateProcessA SetErrorMode GetVersionExA GetFileAttributesW GetFileSize SetFileAttributesW GetThreadPriority TerminateThread GetProfileIntA FreeLibrary LocalAlloc Sleep GetModuleHandleA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetProfileStringA HeapSetInformation GetCPInfo ExpandEnvironmentStringsW GetCommandLineW MultiByteToWideChar GetSystemTime GetThreadLocale GetTimeFormatW GetConsoleOutputCP LocalFree GetStdHandle WideCharToMultiByte CreateFileW GetProcessHeap IsBadStringPtrW VirtualLock IsValidCodePage OutputDebugStringW TlsGetValue SetUnhandledExceptionFilter GetFullPathNameW GetCommandLineA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection lstrlenA InitializeCriticalSection DisableThreadLibraryCalls

user32

AdjustWindowRectEx CheckMenuItem

advapi32

RegCloseKey ChangeServiceConfig2W DeleteService RegCreateKeyExW RegSetValueExA RegSetValueExW RegOpenKeyExW RegQueryValueExW CreateServiceW

shell32

CommandLineToArgvW

ole32

CoWaitForMultipleHandles CoTaskMemAlloc CoTaskMemFree CoCreateFreeThreadedMarshaler StringFromGUID2

msvcrt

memset strpbrk strspn sscanf fgets strchr wcstoul free malloc exit wcschr wcstok wcsrchr

Sharing

General

Malware Config

Signatures

File Explorer

ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118

kernel32

user32

advapi32

shell32

ole32

msvcrt

generic