02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118
Size 98KB
Sample240427-j54baaee76
SHA256 2beb88afa4c3293925fc8175d654d135c60e4aa5303616ab13f040a771370411
MD5 02cf184b6b3655d8a8cfc46d3ad98130
SHA1 d0fa3b894c09f856e9c882d922a9d288c23e0a38
SHA512 3a3b6dd96c2bdfe5f9ca0b7297173cf9d454ac9c1ea61387900cfc782ab000dc858c287eb5ffea154248b212dcfb26b1b7b5f026485fdfe3e76fdca7bd0d0407
SSDEEP 1536:0MWO4O9IR5Zw1WvO1+QrK/F2BZhWv0ua/Kub/HPHn5ujt+UYxPfMVxe:0ML4O96w0G1+au2BZhWMuaCwv4IPf1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118

File Explorer

02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118

.exe 98KB

02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118

IMPHASH 5085ed1633abf7ace84c9102f89d288f
SHA256 2beb88afa4c3293925fc8175d654d135c60e4aa5303616ab13f040a771370411
MD5 02cf184b6b3655d8a8cfc46d3ad98130
SHA1 d0fa3b894c09f856e9c882d922a9d288c23e0a38
SHA512 3a3b6dd96c2bdfe5f9ca0b7297173cf9d454ac9c1ea61387900cfc782ab000dc858c287eb5ffea154248b212dcfb26b1b7b5f026485fdfe3e76fdca7bd0d0407
SSDEEP 1536:0MWO4O9IR5Zw1WvO1+QrK/F2BZhWv0ua/Kub/HPHn5ujt+UYxPfMVxe:0ML4O96w0G1+au2BZhWMuaCwv4IPf1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42u

ord5710 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4616 ord4418 ord3733 ord561 ord815 ord6211 ord617 ord5297 ord5208 ord296 ord986 ord520 ord4154 ord6113 ord2613 ord1131 ord5261 ord4370 ord4847 ord4992 ord4704 ord2506 ord6048 ord4073 ord1767 ord4401 ord5237 ord2377 ord5157 ord6370 ord4347 ord5276 ord3793 ord4831 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord4621 ord4419 ord3592 ord324 ord641 ord4229 ord1817 ord4233 ord4690 ord3053 ord3060 ord6332 ord2502 ord2534 ord5239 ord5736 ord1739 ord5573 ord3167 ord5649 ord4414 ord4947 ord5285 ord2391 ord4381 ord3449 ord3193 ord6076 ord6171 ord4617 ord4420 ord338 ord652 ord4817 ord4608 ord4607 ord1937 ord4268 ord4583 ord4893 ord5070 ord4335 ord4343 ord4717 ord4884 ord4525 ord4539 ord4537 ord4520 ord4523 ord4518 ord4958 ord4955 ord4103 ord6051 ord1768 ord5236 ord5286 ord3743 ord1719 ord4426 ord560 ord813 ord354 ord2527 ord1834 ord4237 ord2715 ord2382 ord3054 ord5094 ord5097 ord4461 ord4298 ord3345 ord5006 ord975 ord5468 ord3398 ord2874 ord2873 ord4146 ord4072 ord5233 ord5278 ord2641 ord1658 ord4430 ord4421 ord796 ord674 ord554 ord529 ord366 ord807 ord2486 ord2619 ord2618 ord5996 ord2109 ord4158 ord6617 ord4451 ord5248 ord1569 ord5303 ord4692 ord4074 ord2717 ord5298 ord5296 ord3341 ord2388 ord5193 ord1089 ord3917 ord5727 ord2504 ord2546 ord4480 ord6371 ord4269 ord4604 ord4606 ord4609 ord2385 ord350 ord823 ord825 ord4852 ord3658 ord1165

msvcrt

_controlfp _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 __set_app_type __p__fmode __p__commode __CxxFrameHandler _CxxThrowException _exit _XcptFilter exit _wcmdln __wgetmainargs _initterm _adjust_fdiv __setusermatherr

kernel32

GetSystemTimeAdjustment GetTimeFormatA CloseHandle GetCurrentDirectoryA GetModuleHandleW GetStartupInfoW SetFilePointer SetCurrentDirectoryW GetCurrentThread HeapDestroy ClearCommBreak GetCurrentProcessId MapViewOfFile UnmapViewOfFile GetACP TerminateProcess

user32

EnableWindow UpdateWindow GetClientRect TrackPopupMenu MoveWindow MessageBoxIndirectA GetDlgItemTextW SetDlgItemTextW

gdi32

SelectPalette CreatePalette DeleteObject StretchDIBits

Sharing

General

Malware Config

Signatures

File Explorer

02cf184b6b3655d8a8cfc46d3ad98130_JaffaCakes118

mfc42u

msvcrt

kernel32

user32

gdi32

generic