f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118

General

Target
f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118
Size 860KB
Sample240418-psq33sed2s
SHA256 8151e6031cf57c2b19146881a32fb1fd50b39b6ee5c7cd689c4e2a6216f1433d
MD5 f8012c68dbfc30b3724d40ddfc39eca4
SHA1 130c7691681119b56187104a781c777198708183
SHA512 1394edf09155a3057e22de5ac1082e6d7abce2e6a8530e8a3cb382b87f38bbd4baa93e171f01a1176d1d8829de599034fba8dbf4aaba876628d17816a9bed043
SSDEEP 12288:11Wl8T5+M63xjmeMf3vQY9244jz5X9tPAEAvP:1A24dxYvx4vJvkvP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118

File Explorer

f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118

.exe 860KB

f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118

IMPHASH 49be0836dac021f86af2cb207b4613c8
SHA256 8151e6031cf57c2b19146881a32fb1fd50b39b6ee5c7cd689c4e2a6216f1433d
MD5 f8012c68dbfc30b3724d40ddfc39eca4
SHA1 130c7691681119b56187104a781c777198708183
SHA512 1394edf09155a3057e22de5ac1082e6d7abce2e6a8530e8a3cb382b87f38bbd4baa93e171f01a1176d1d8829de599034fba8dbf4aaba876628d17816a9bed043
SSDEEP 12288:11Wl8T5+M63xjmeMf3vQY9244jz5X9tPAEAvP:1A24dxYvx4vJvkvP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

134730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringW FormatMessageW VirtualProtect HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetProcessHeap WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc WriteConsoleW GetModuleHandleExW GetModuleFileNameW GetFileType GetStdHandle LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetCPInfo CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary CreateFileW

user32

GrayStringA GetDC TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW ShowWindow SetCapture ReleaseCapture LoadImageW LoadCursorW SetWindowLongW GetWindowLongW AdjustWindowRect UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup GdiplusShutdown

Sharing

General

Malware Config

Signatures

File Explorer

f8012c68dbfc30b3724d40ddfc39eca4_JaffaCakes118

kernel32

user32

d3d11

gdiplus

generic