f29ce6d14060aefce95dae1440200bde_JaffaCakes118

General

Target
f29ce6d14060aefce95dae1440200bde_JaffaCakes118
Size 108KB
Sample240416-ea47wagf54
SHA256 d239d789d8336325349de382e63f46472b65717e86cd57a4bc18966206428762
MD5 f29ce6d14060aefce95dae1440200bde
SHA1 bd9b99f01d009cfe96c608c94577db56756d140f
SHA512 b7bc0cd71630cfd56e0e5e479520c488489be3db920f19e82abcc4c0577e3ce43ef9d6d8d775313cb454c19a1b5c3f921db01dd6c15ca9bf55a32f79247cfa03
SSDEEP 1536:YX6Ng6DNEeOR9udDafLB9PccAmZMFXaIQ2cHNwxlPp3kybpH/QROwM4Usm0lAq:YX6N9DVsSCBFEFqPncBiOqUx0lAq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f29ce6d14060aefce95dae1440200bde_JaffaCakes118

File Explorer

f29ce6d14060aefce95dae1440200bde_JaffaCakes118

.exe 108KB

f29ce6d14060aefce95dae1440200bde_JaffaCakes118

IMPHASH 911b12cf37e22bf5da601a26b145b131
SHA256 d239d789d8336325349de382e63f46472b65717e86cd57a4bc18966206428762
MD5 f29ce6d14060aefce95dae1440200bde
SHA1 bd9b99f01d009cfe96c608c94577db56756d140f
SHA512 b7bc0cd71630cfd56e0e5e479520c488489be3db920f19e82abcc4c0577e3ce43ef9d6d8d775313cb454c19a1b5c3f921db01dd6c15ca9bf55a32f79247cfa03
SSDEEP 1536:YX6Ng6DNEeOR9udDafLB9PccAmZMFXaIQ2cHNwxlPp3kybpH/QROwM4Usm0lAq:YX6N9DVsSCBFEFqPncBiOqUx0lAq
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

56550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenProcess FreeLibrary LoadLibraryA CreateToolhelp32Snapshot GetVolumeInformationA CreateFileA CreateDirectoryA lstrlenA DeviceIoControl GetFileAttributesA SetEndOfFile Process32First Process32Next FlushFileBuffers CreateProcessA GetShortPathNameA CreateProcessW MultiByteToWideChar GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA CopyFileA DeleteFileA SetEvent CreateEventA WaitForSingleObject CloseHandle GlobalAlloc GlobalFree GetModuleFileNameA GetLastError GetVersionExA SetConsoleCtrlHandler GetModuleHandleA GetProcAddress Sleep CreateFileMappingA AllocConsole GetStdHandle FormatMessageA LocalFree OpenMutexA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter ReadFile RtlUnwind SetStdHandle EnterCriticalSection LeaveCriticalSection GetFileType RaiseException GetCommandLineA HeapAlloc TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue GetACP GetOEMCP GetCPInfo SetHandleCount GetStartupInfoA DeleteCriticalSection InitializeCriticalSection ExitProcess TerminateProcess GetCurrentProcess HeapFree SetUnhandledExceptionFilter HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery LCMapStringA WideCharToMultiByte LCMapStringW WriteFile UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree IsBadWritePtr IsBadReadPtr IsBadCodePtr GetStringTypeA GetStringTypeW InterlockedExchange GetLocaleInfoA SetFilePointer

user32

DestroyWindow DefWindowProcA CreateWindowExA RegisterClassA

advapi32

DeleteService OpenProcessToken CreateProcessAsUserW RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegDeleteValueA RegCreateKeyA RegSetValueExA RegCloseKey CreateServiceA GetUserNameA LookupAccountNameA IsValidSid GetLengthSid CopySid StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA StartServiceA OpenSCManagerA OpenServiceA ControlService QueryServiceStatus CloseServiceHandle RegSetKeySecurity RegisterEventSourceA ReportEventA DeregisterEventSource SetServiceStatus

ole32

CoInitialize CoUninitialize CoGetClassObject

Sharing

General

Malware Config

Signatures

File Explorer

f29ce6d14060aefce95dae1440200bde_JaffaCakes118

kernel32

user32

advapi32

ole32

generic