e8497e6d1fedc292adde5b617178f711_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
e8497e6d1fedc292adde5b617178f711_JaffaCakes118
Size 124KB
Sample240408-ypm2pade8w
SHA256 e519e3ac612f6ad7c8cf7b9c5916978a24d4a0ea15365b08f15c9affadd6932c
MD5 e8497e6d1fedc292adde5b617178f711
SHA1 3f88962b4bbd389188fbfae1e6eb05ab5a1102a9
SHA512 b7b812175c0536560eb1782a8426e6750fe0d8f2ea09b01ad7109c45346aae2cd0e3f6ce3c49c88af1b06bb9ec1b0398cd0b12d34f4e655a398bbb1274cbee2d
SSDEEP 3072:wNG0Zei/azzmWxd/mZQA3h146eqteGrSM7:gtryKYJmmAhearN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e8497e6d1fedc292adde5b617178f711_JaffaCakes118

.dll 124KB

e8497e6d1fedc292adde5b617178f711_JaffaCakes118

IMPHASH 3349570131fbaa69ef5ccbf0c5cb1ade
SHA256 e519e3ac612f6ad7c8cf7b9c5916978a24d4a0ea15365b08f15c9affadd6932c
MD5 e8497e6d1fedc292adde5b617178f711
SHA1 3f88962b4bbd389188fbfae1e6eb05ab5a1102a9
SHA512 b7b812175c0536560eb1782a8426e6750fe0d8f2ea09b01ad7109c45346aae2cd0e3f6ce3c49c88af1b06bb9ec1b0398cd0b12d34f4e655a398bbb1274cbee2d
SSDEEP 3072:wNG0Zei/azzmWxd/mZQA3h146eqteGrSM7:gtryKYJmmAhearN
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

40841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedIncrement InterlockedDecrement GetShortPathNameA GetModuleHandleA MultiByteToWideChar lstrlenW SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcpynA WideCharToMultiByte HeapDestroy CloseHandle ReleaseMutex WaitForSingleObject CreateMutexA CompareStringW CompareStringA GetLocaleInfoW GetTimeZoneInformation SetConsoleCtrlHandler GetOEMCP GetACP GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA GetProcAddress GetCurrentThreadId GetCurrentProcessId lstrcatA OutputDebugStringA lstrlenA lstrcmpiA lstrcpyA GetCurrentDirectoryA GetModuleFileNameA SetCurrentDirectoryA LoadLibraryA GetLastError IsDBCSLeadByte FreeLibrary IsValidCodePage IsValidLocale GetCPInfo SetEnvironmentVariableA GetStringTypeW GetStringTypeA UnhandledExceptionFilter IsBadCodePtr IsBadReadPtr WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA RtlUnwind RaiseException HeapFree HeapReAlloc HeapAlloc GetCommandLineA GetVersion ExitProcess FatalAppExitA TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentThread SetUnhandledExceptionFilter Sleep LCMapStringA LCMapStringW GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc IsBadWritePtr TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle GetFileType

user32

wsprintfA DefWindowProcA wvsprintfA SetWindowLongA PostMessageA MessageBoxA CharNextA CallWindowProcA GetWindowLongA

advapi32

RegQueryInfoKeyA RegEnumKeyExA RegOpenKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegQueryValueA RegOpenKeyA RegQueryValueExA RegSetValueA RegCreateKeyA RegSetValueExA RegCloseKey RegEnumValueA

ole32

CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree CoCreateInstance

oleaut32

VariantCopy SysStringLen LoadRegTypeLi RegisterTypeLi SysAllocString LoadTypeLi VarUI4FromStr VariantClear SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

e8497e6d1fedc292adde5b617178f711_JaffaCakes118

PE Signature issue

kernel32

user32

advapi32

ole32

oleaut32

generic