f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118

General

Target
f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118
Size 694KB
Sample240418-vjdpaaab23
SHA256 39fc8ada09fdee11dac8fbb0236624c2d5dcf2b66d8f2aa4bbcdeada6de6206b
MD5 f866a06214ff680e7d9f586a8d6a84f5
SHA1 e835c54d53c216a7e4b0743bffe37fb58bf66e72
SHA512 9e207618b176e3301518eba958fa0eac1e4d434744a883bd6481ef364a67a72dd78b657d63783b0ac1524c996511b4557d6af18236a9b0ba23ce1599543675c1
SSDEEP 12288:21Wl8TpUMxskWv6VfuEPECDMmZXSJpBRR3QxZ:2AGR0yUExx+Cf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118

File Explorer

f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118

.exe 694KB

f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118

IMPHASH 49be0836dac021f86af2cb207b4613c8
SHA256 39fc8ada09fdee11dac8fbb0236624c2d5dcf2b66d8f2aa4bbcdeada6de6206b
MD5 f866a06214ff680e7d9f586a8d6a84f5
SHA1 e835c54d53c216a7e4b0743bffe37fb58bf66e72
SHA512 9e207618b176e3301518eba958fa0eac1e4d434744a883bd6481ef364a67a72dd78b657d63783b0ac1524c996511b4557d6af18236a9b0ba23ce1599543675c1
SSDEEP 12288:21Wl8TpUMxskWv6VfuEPECDMmZXSJpBRR3QxZ:2AGR0yUExx+Cf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

134730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringW FormatMessageW VirtualProtect HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetProcessHeap WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc WriteConsoleW GetModuleHandleExW GetModuleFileNameW GetFileType GetStdHandle LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetCPInfo CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary CreateFileW

user32

GrayStringA GetDC TranslateMessage DispatchMessageW PeekMessageW DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW ShowWindow SetCapture ReleaseCapture LoadImageW LoadCursorW SetWindowLongW GetWindowLongW AdjustWindowRect UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup GdiplusShutdown

Sharing

General

Malware Config

Signatures

File Explorer

f866a06214ff680e7d9f586a8d6a84f5_JaffaCakes118

kernel32

user32

d3d11

gdiplus

generic