e632d3604cdff042815f2d18859d1fc2_JaffaCakes118

General

Target
e632d3604cdff042815f2d18859d1fc2_JaffaCakes118
Size 761KB
Sample240408-amxw4sbb83
SHA256 3e088b464ade52e935c9b99f62ca3f490dc777ab2396fddea93d08b213c77abf
MD5 e632d3604cdff042815f2d18859d1fc2
SHA1 47c4732ff3f279c98e426b19e3e910b93f86b8f7
SHA512 3dea9185c079bb8b0ef4fe529814672e91fdde636e21e6bca83fa8b95375f1ee53958ff1751128d21dc21c35871bbc6695d292daab9fb4b88b11885053a668cd
SSDEEP 12288:WCm5RLVrccv5KbK0I5dQW0I1mdjXR/KfUef8Ghcl6ezBSdWQ9FSAHjFy3AOBu5M:WCARLXVV+I1mNw8eftSlLnQ9FXHg3AOG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e632d3604cdff042815f2d18859d1fc2_JaffaCakes118

File Explorer

e632d3604cdff042815f2d18859d1fc2_JaffaCakes118

.exe 761KB

e632d3604cdff042815f2d18859d1fc2_JaffaCakes118

IMPHASH 76fa6c5ec063b16843e6d99e66ff1747
SHA256 3e088b464ade52e935c9b99f62ca3f490dc777ab2396fddea93d08b213c77abf
MD5 e632d3604cdff042815f2d18859d1fc2
SHA1 47c4732ff3f279c98e426b19e3e910b93f86b8f7
SHA512 3dea9185c079bb8b0ef4fe529814672e91fdde636e21e6bca83fa8b95375f1ee53958ff1751128d21dc21c35871bbc6695d292daab9fb4b88b11885053a668cd
SSDEEP 12288:WCm5RLVrccv5KbK0I5dQW0I1mdjXR/KfUef8Ghcl6ezBSdWQ9FSAHjFy3AOBu5M:WCARLXVV+I1mNw8eftSlLnQ9FXHg3AOG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4897

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\inetpub\Temp\8139q0opk0a7infe1rd94i89i4\Stub.pdb

kernel32

GetCurrentProcess VirtualFree lstrcatA GetProcAddress VirtualAlloc LoadLibraryA CreateThread lstrcpyA GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoW GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

e632d3604cdff042815f2d18859d1fc2_JaffaCakes118

kernel32

generic