e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118

General

Target
e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118
Size 555KB
Sample240408-aebc5sag78
SHA256 18cd73a838afa7eaedf424631d6a079f2ffe83c8d400d129656cad2fa6260567
MD5 e62d40e9bd1eeab66cb3c781d543b64f
SHA1 60936844a9b67f04929f02313cbe13216cc5a9b8
SHA512 caa04e2bb29e2f547852d1624fd5c05c11063d4c1e3c2419ee0af2fd56b19de9557faab86caf851fc8bb852020cef2df063cb73217d29c60af849e88c2a105d3
SSDEEP 12288:c3LWHX34JgXZrXhcepr1klgTszv1P9V594uFsNuEjdVIP9hefKUomLn/PUkvau2D:c3LQcepp9TsTh9VHyd99L/5iu2D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118

File Explorer

e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118

.exe 555KB

e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118

IMPHASH 82004e82653b7bafbfcf73a18d8cef95
SHA256 18cd73a838afa7eaedf424631d6a079f2ffe83c8d400d129656cad2fa6260567
MD5 e62d40e9bd1eeab66cb3c781d543b64f
SHA1 60936844a9b67f04929f02313cbe13216cc5a9b8
SHA512 caa04e2bb29e2f547852d1624fd5c05c11063d4c1e3c2419ee0af2fd56b19de9557faab86caf851fc8bb852020cef2df063cb73217d29c60af849e88c2a105d3
SSDEEP 12288:c3LWHX34JgXZrXhcepr1klgTszv1P9V594uFsNuEjdVIP9hefKUomLn/PUkvau2D:c3LQcepp9TsTh9VHyd99L/5iu2D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

27024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenW MultiByteToWideChar WideCharToMultiByte GetConsoleOutputCP lstrcpyW SetEndOfFile HeapReAlloc HeapSize GetConsoleCP FlushFileBuffers lstrcmpiW lstrcmpW FormatMessageW LocalFree GetProcAddress GetModuleHandleW GetLastError CloseHandle WriteFile CreateFileW WriteConsoleW GetStdHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW GetCurrentThread GetStringTypeW HeapFree HeapAlloc GetFileType ReadFile GetConsoleMode ReadConsoleW OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetProcessHeap SetConsoleCtrlHandler GetFileSizeEx SetFilePointerEx DecodePointer

user32

GrayStringA GetDC MessageBoxA

advapi32

RegDeleteTreeW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegEnumValueW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegCreateKeyW RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

e62d40e9bd1eeab66cb3c781d543b64f_JaffaCakes118

kernel32

user32

advapi32

generic