e65e1479089507fa9c516917aaec404e_JaffaCakes118

General

Target
e65e1479089507fa9c516917aaec404e_JaffaCakes118
Size 90KB
Sample240408-cc8a7sde46
SHA256 3244f27a6e152bd71d15d538045d8bd086c681098e8aedd01e93a4f7d7fc636d
MD5 e65e1479089507fa9c516917aaec404e
SHA1 93e4528e4ad444aecf201e1c35e94b564db694f2
SHA512 0c07426ad9ebcbeee547dd143ba11275c722389a9ba1b4acf4197db9f9d85e64fa16eca63796e2d18f1acef9269497476988071ff003e7fefe25b124e5395e0d
SSDEEP 1536:cHBNAohbsr3EFVKECcWLE41fJwyYoP5Kt8AvBVmXTWvka3/VOOqFe:obhbA3EfCcyXUXmoka3/sI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e65e1479089507fa9c516917aaec404e_JaffaCakes118

File Explorer

e65e1479089507fa9c516917aaec404e_JaffaCakes118

.exe 90KB

e65e1479089507fa9c516917aaec404e_JaffaCakes118

IMPHASH ff67b2b890bd93fe2e2351d624c2344e
SHA256 3244f27a6e152bd71d15d538045d8bd086c681098e8aedd01e93a4f7d7fc636d
MD5 e65e1479089507fa9c516917aaec404e
SHA1 93e4528e4ad444aecf201e1c35e94b564db694f2
SHA512 0c07426ad9ebcbeee547dd143ba11275c722389a9ba1b4acf4197db9f9d85e64fa16eca63796e2d18f1acef9269497476988071ff003e7fefe25b124e5395e0d
SSDEEP 1536:cHBNAohbsr3EFVKECcWLE41fJwyYoP5Kt8AvBVmXTWvka3/VOOqFe:obhbA3EfCcyXUXmoka3/sI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateThread Sleep GetStartupInfoA GlobalFree

user32

GetWindowTextLengthA SendMessageA SetDlgItemInt SetDlgItemTextA SetWindowPos GetClientRect GetDlgItem SendDlgItemMessageA MessageBoxA CreateWindowExA GetMessageA GetWindowRect SetWindowTextA PostQuitMessage DefWindowProcA DispatchMessageA LoadIconA LoadCursorA LoadImageA RegisterClassExA ShowWindow UpdateWindow TranslateMessage

gdi32

GetObjectA CreateSolidBrush CreateFontIndirectA GetStockObject

ole32

CoInitialize

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

msvcrt40

memcpy _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _EH_prolog __CxxFrameHandler strcmp memmove malloc sprintf getenv ??2@YAPAXI@Z memset strlen _except_handler3 _stricmp

Sharing

General

Malware Config

Signatures

File Explorer

e65e1479089507fa9c516917aaec404e_JaffaCakes118

kernel32

user32

gdi32

ole32

msvcp60

msvcrt40

generic