fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118

General

Target
fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118
Size 11.5MB
Sample240419-pvkn3sce89
SHA256 2f89d2275e7708b9b39b3e554217c81fc9f1312f4a85790450843b28b10fe1b0
MD5 fa4fd90bf7c41e6e04a4eb88dabd22cb
SHA1 0eb6d1e0b924dd203f0b8be3a54948a5cb2cb856
SHA512 18e7f39f472d1317500410a213af80a19ddbc29130cda482fc6ef26f7a4607089fc0a65dc551ba65b2b25dc4687a57ee5981fac9839c1715a9ce0259abec1fe1
SSDEEP 98304:svkoooooooooooooooooooooooooooooooooooooooooooooooooooooooooooow:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118

File Explorer

fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118

.exe 11.5MB

fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118

IMPHASH b30e90057494159649beb9e34df9e4f6
SHA256 2f89d2275e7708b9b39b3e554217c81fc9f1312f4a85790450843b28b10fe1b0
MD5 fa4fd90bf7c41e6e04a4eb88dabd22cb
SHA1 0eb6d1e0b924dd203f0b8be3a54948a5cb2cb856
SHA512 18e7f39f472d1317500410a213af80a19ddbc29130cda482fc6ef26f7a4607089fc0a65dc551ba65b2b25dc4687a57ee5981fac9839c1715a9ce0259abec1fe1
SSDEEP 98304:svkoooooooooooooooooooooooooooooooooooooooooooooooooooooooooooow:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW SetDefaultCommConfigA SetPriorityClass SleepEx SetTapeParameters GetModuleHandleW GetTickCount GetSystemTimeAsFileTime WriteFile GlobalAlloc GetPrivateProfileIntA Sleep GetPrivateProfileStructW SizeofResource SetSystemTimeAdjustment lstrlenW RaiseException GetThreadContext FreeLibraryAndExitThread SetVolumeLabelW GetConsoleDisplayMode BuildCommDCBW LoadLibraryA CreateSemaphoreW AddAtomW PostQueuedCompletionStatus SetSystemTime _lread CreateMutexA VirtualProtect CloseHandle GetSystemTime lstrcpyA GetSystemDefaultLangID FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW LCMapStringA GetStringTypeW HeapCreate VirtualFree VirtualAlloc GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetStringTypeA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

gdi32

GetCharWidthA

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

fa4fd90bf7c41e6e04a4eb88dabd22cb_JaffaCakes118

kernel32

gdi32

winhttp

generic