e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118

General

Target
e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118
Size 380KB
Sample240406-xscvfsha76
SHA256 6fd8905fe7fa2138c3445a1537c608b3a0114d35ca9222f9b164417d64b6383b
MD5 e310b98bf02bb5668038f0cbe33eec91
SHA1 304986af4740d896cb78b6486f0a2bf4297e5ec5
SHA512 06511a7c286e6e44d6d955c57b2f465944683314e304dc29e747a7a7695d6da629109cf2851154f83761f683e718d002a17dfe8b3a1050db3c213c2e7820f84d
SSDEEP 6144:p0NYrIax3H6MiIncTH72KOzskxhXxCuK7B7JuHdZ+CZAH6fpc:AYEax3H6iW72KO46Ba71Ju9Z3E6fpc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118

File Explorer

e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118

.dll 380KB

e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118

IMPHASH 96a751d06fd16716a32be1402c4bbaa4
SHA256 6fd8905fe7fa2138c3445a1537c608b3a0114d35ca9222f9b164417d64b6383b
MD5 e310b98bf02bb5668038f0cbe33eec91
SHA1 304986af4740d896cb78b6486f0a2bf4297e5ec5
SHA512 06511a7c286e6e44d6d955c57b2f465944683314e304dc29e747a7a7695d6da629109cf2851154f83761f683e718d002a17dfe8b3a1050db3c213c2e7820f84d
SSDEEP 6144:p0NYrIax3H6MiIncTH72KOzskxhXxCuK7B7JuHdZ+CZAH6fpc:AYEax3H6iW72KO46Ba71Ju9Z3E6fpc
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

258464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleFileNameA GetSystemTime lstrcpynA GetProcAddress LoadLibraryA VirtualQuery VirtualProtect VirtualAlloc InterlockedCompareExchange GetCurrentThreadId ResumeThread FlushInstructionCache GetCurrentProcess GetThreadContext SetThreadContext GetLastError SuspendThread GetCurrentThread SetLastError FlushFileBuffers CloseHandle CreateFileA GetStringTypeW GetStringTypeA RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetModuleHandleA Sleep HeapSize ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW

shell32

ShellExecuteExW

oleaut32

VariantCopy SysStringByteLen SysAllocStringByteLen SysAllocString VariantChangeType VariantClear VariantInit SysFreeString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

e310b98bf02bb5668038f0cbe33eec91_JaffaCakes118

kernel32

shell32

oleaut32

generic