d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118

General

Target
d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118
Size 620KB
Sample240405-p4ty4sdc23
SHA256 e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f
MD5 d43c607d910f3fadcdcab61c2c02e00d
SHA1 0593ba30973c12dba865082d22ef342a38181af0
SHA512 d8ae715d38a321f19e6646f26bac6eb7040559fd461d2f1a835dd35171d9632a92461fb1a26fb3dc1a7c7ccbe2e7d395338f75d22eb45fd26abc888b189d654b
SSDEEP 12288:hE6rSia4Ibs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y1XO/zFZx:PeIt3j0dMZnCutz4zI5xDwXUFm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118

File Explorer

d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118

.dll 620KB

d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118

IMPHASH 77aefec4cdbad9a00d9143503be0ce97
SHA256 e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f
MD5 d43c607d910f3fadcdcab61c2c02e00d
SHA1 0593ba30973c12dba865082d22ef342a38181af0
SHA512 d8ae715d38a321f19e6646f26bac6eb7040559fd461d2f1a835dd35171d9632a92461fb1a26fb3dc1a7c7ccbe2e7d395338f75d22eb45fd26abc888b189d654b
SSDEEP 12288:hE6rSia4Ibs3j09TMmonCh5atbz9+eoQoUZpDd7Da1nX9y1XO/zFZx:PeIt3j0dMZnCutz4zI5xDwXUFm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

121499

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\shape\time\depend\Nose\835\Name.pdb

kernel32

FileTimeToLocalFileTime CreateEventW GetVersion Sleep GetCurrentThreadId GetProcAddress LoadLibraryW GetEnvironmentVariableW VirtualProtectEx GetWindowsDirectoryW SetConsoleOutputCP CreateSemaphoreW GetTempPathW CompareStringW CompareStringA CreateFileA SetStdHandle SetFilePointer WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle HeapSize GetLocaleInfoW FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler WriteFile HeapReAlloc VirtualAlloc InterlockedIncrement InterlockedDecrement GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetLastError WideCharToMultiByte SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetTimeFormatA GetDateFormatA FatalAppExitA GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThread GetACP GetOEMCP GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA MultiByteToWideChar GetStringTypeW GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection RtlUnwind LCMapStringA LCMapStringW GetTimeZoneInformation SetEnvironmentVariableA

user32

LoadCursorW BeginDeferWindowPos UnregisterHotKey DeferWindowPos TranslateMessage CreateMenu RegisterWindowMessageW

psapi

GetDeviceDriverBaseNameW GetModuleInformation EmptyWorkingSet EnumProcesses GetMappedFileNameW EnumPageFilesW GetDeviceDriverFileNameW EnumProcessModules GetModuleFileNameExW GetModuleBaseNameW GetPerformanceInfo EnumDeviceDrivers

Sharing

General

Malware Config

Signatures

File Explorer

d43c607d910f3fadcdcab61c2c02e00d_JaffaCakes118

kernel32

user32

psapi

generic