e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118

General

Target
e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118
Size 280KB
Sample240409-a8wwyace8x
SHA256 b84db954bee1159396a2c0b9fcb83d0519392213195a39fb92412443e5d53fc1
MD5 e8d5851529821d377b74ec87ea6eb60c
SHA1 fd90adc19a0bcee35ecca33607734ed75cb51dc4
SHA512 396347261c76c9811d581f334154a6ea918bc437a58bd9ac9879c865eee76ab787249db656503056da5c2b4acc6067bd3d555b825fed1d028d33447b0fb7a944
SSDEEP 6144:umr2hoZyxT3m0r1ttK5TEhXWgzfgu/5r6vCb5pl:1r2eZyxi0r13K5TEPzIuBevwl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118

File Explorer

e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118

.exe 280KB

e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118

IMPHASH bb2050aebafd3ebd7796bade9f654b85
SHA256 b84db954bee1159396a2c0b9fcb83d0519392213195a39fb92412443e5d53fc1
MD5 e8d5851529821d377b74ec87ea6eb60c
SHA1 fd90adc19a0bcee35ecca33607734ed75cb51dc4
SHA512 396347261c76c9811d581f334154a6ea918bc437a58bd9ac9879c865eee76ab787249db656503056da5c2b4acc6067bd3d555b825fed1d028d33447b0fb7a944
SSDEEP 6144:umr2hoZyxT3m0r1ttK5TEhXWgzfgu/5r6vCb5pl:1r2eZyxi0r13K5TEPzIuBevwl
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

37408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA VirtualAlloc WriteConsoleInputW FlushFileBuffers CloseHandle GetEnvironmentVariableA GetStringTypeW UpdateResourceA GetProcAddress GetCommandLineA GetStartupInfoA SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW HeapAlloc HeapSize HeapReAlloc RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

user32

RedrawWindow SetPropA IsCharLowerA DefDlgProcA TrackPopupMenuEx

gdi32

CreateCompatibleDC OffsetClipRgn ExtFloodFill LineTo

Sharing

General

Malware Config

Signatures

File Explorer

e8d5851529821d377b74ec87ea6eb60c_JaffaCakes118

kernel32

user32

gdi32

generic