e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118

General

Target
e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118
Size 597KB
Sample240408-a2fldabe7t
SHA256 2d8e9b76ce946ef521987f5965e35b5755ecfac3ccaa939113459d025e7441e3
MD5 e63c7f2e02fc1fe157a2638f6c7d5d3d
SHA1 57711446acd6f1ae7c49a92668eb1391d231f451
SHA512 1516eeb7c8eeaeb2a2c6ef09e690a8d2a5222862a93e381fcc80e5bf870c1d2f7380fdacfb7c9cdde3465e15e0b053915770472a60b4db9e7637d41136f07691
SSDEEP 12288:5kbqHlPEFmm1OKmRrsPxS1pWyJxsQlUT19sMJxNfWN3hf6y:SboRBR4U1FsQluUyY3hf1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118

File Explorer

e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118

.exe 597KB

e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118

IMPHASH 049c4c2301fd146cc727650be9a9ce55
SHA256 2d8e9b76ce946ef521987f5965e35b5755ecfac3ccaa939113459d025e7441e3
MD5 e63c7f2e02fc1fe157a2638f6c7d5d3d
SHA1 57711446acd6f1ae7c49a92668eb1391d231f451
SHA512 1516eeb7c8eeaeb2a2c6ef09e690a8d2a5222862a93e381fcc80e5bf870c1d2f7380fdacfb7c9cdde3465e15e0b053915770472a60b4db9e7637d41136f07691
SSDEEP 12288:5kbqHlPEFmm1OKmRrsPxS1pWyJxsQlUT19sMJxNfWN3hf6y:SboRBR4U1FsQluUyY3hf1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

65486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\projects\_codeconst\smart-installer\unstable-dll\output\MinSizeRel\dllstub-default.pdb

kernel32

FindResourceW FindResourceExW CloseHandle WriteFile GetSystemTime CreateFileW GetTempFileNameW GetTempPathW GetVersion GetLastError OpenMutexW GetCurrentProcessId CreateMutexA GetModuleHandleW GetProcessVersion Sleep WaitForSingleObject OpenMutexA GetCurrentThreadId GetTickCount LoadResource GetModuleFileNameA OpenEventW GetProcessHeap GetModuleHandleA IsProcessorFeaturePresent FreeLibrary GetProcAddress LoadLibraryW LoadLibraryA IsBadReadPtr WriteConsoleW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW SetFilePointer ReadFile FlushFileBuffers LockResource GetDriveTypeA SizeofResource GetConsoleMode GetConsoleCP RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSection RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP IsValidCodePage ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW SetStdHandle

user32

GetDC ReleaseDC GetDesktopWindow GetSysColor GetCursor GetSystemMetrics GetFocus GetForegroundWindow GetSysColorBrush

gdi32

GetStockObject MoveToEx

shlwapi

PathStripToRootA

Sharing

General

Malware Config

Signatures

File Explorer

e63c7f2e02fc1fe157a2638f6c7d5d3d_JaffaCakes118

kernel32

user32

gdi32

shlwapi

generic