e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118

General

Target
e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118
Size 394KB
Sample240407-yrwrlsda8v
SHA256 775c414e45f8a0cfeadca1218ea59e9dea47a5c8962c7ea7f6fc2dec7b614e0c
MD5 e5bec9e000606b4d3d146952cd710ed8
SHA1 c8e520b4e2741ce28b72740ff98f11b09ce0c131
SHA512 52e07e66ac688cf9ac4d80458cb7c50d345ec0258e4102b046525e982cca5bd9822f273fc7dc5d6af85238cc4f77abca2a2c1a0bcc4cdf70fac385cb9faca41c
SSDEEP 12288:GouqSMKoL9+QKRKDoF/svLp51v7ouYCC:WdNgmYN51v7ax
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118

File Explorer

e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118

.dll 394KB

e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118

IMPHASH ae66ec1199692f86e4d3d5ef87bd398b
SHA256 775c414e45f8a0cfeadca1218ea59e9dea47a5c8962c7ea7f6fc2dec7b614e0c
MD5 e5bec9e000606b4d3d146952cd710ed8
SHA1 c8e520b4e2741ce28b72740ff98f11b09ce0c131
SHA512 52e07e66ac688cf9ac4d80458cb7c50d345ec0258e4102b046525e982cca5bd9822f273fc7dc5d6af85238cc4f77abca2a2c1a0bcc4cdf70fac385cb9faca41c
SSDEEP 12288:GouqSMKoL9+QKRKDoF/svLp51v7ouYCC:WdNgmYN51v7ax
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

234054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WriteFile ExitThread GetSystemTime lstrcmpiA GetProcAddress LoadLibraryA DeleteCriticalSection EnterCriticalSection VirtualQuery VirtualProtect VirtualAlloc InterlockedCompareExchange GetCurrentThreadId ResumeThread FlushInstructionCache GetCurrentProcess GetThreadContext SetThreadContext GetLastError SuspendThread GetCurrentThread SetLastError FlushFileBuffers CloseHandle CreateFileA RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetModuleHandleA Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

oleaut32

VariantCopy SysStringByteLen SysAllocStringByteLen SysAllocString VariantChangeType VariantClear VariantInit SysFreeString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

e5bec9e000606b4d3d146952cd710ed8_JaffaCakes118

kernel32

oleaut32

generic