0704068b7be5426f38f2da38c965d04e_JaffaCakes118

General

Target
0704068b7be5426f38f2da38c965d04e_JaffaCakes118
Size 280KB
Sample240429-g6waysce63
SHA256 8c8896ec10234612dd5063dfa4f84ca815ace19c4c2b0b3def9c29be0029f390
MD5 0704068b7be5426f38f2da38c965d04e
SHA1 80ef0434d370a4b112cb632b1868aad93d53a9bd
SHA512 042f7eb2107965149f7cd249de9adcda4a5367d5a789fa4cc71450332f80c7c1d861653646c57faeebe173ca2371530585f0dd36b9164f46132f0652eaa98808
SSDEEP 6144:SqUtrd+yrmjlZI3vIVMPN6SG2H9X0A6NPXiGmJ5WMm:Sz+yoZIwVMPN6SG2x0dNfiGuI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0704068b7be5426f38f2da38c965d04e_JaffaCakes118

File Explorer

0704068b7be5426f38f2da38c965d04e_JaffaCakes118

.dll 280KB

0704068b7be5426f38f2da38c965d04e_JaffaCakes118

IMPHASH c5de455d81abbc68d1b34bdb0878579d
SHA256 8c8896ec10234612dd5063dfa4f84ca815ace19c4c2b0b3def9c29be0029f390
MD5 0704068b7be5426f38f2da38c965d04e
SHA1 80ef0434d370a4b112cb632b1868aad93d53a9bd
SHA512 042f7eb2107965149f7cd249de9adcda4a5367d5a789fa4cc71450332f80c7c1d861653646c57faeebe173ca2371530585f0dd36b9164f46132f0652eaa98808
SSDEEP 6144:SqUtrd+yrmjlZI3vIVMPN6SG2H9X0A6NPXiGmJ5WMm:Sz+yoZIwVMPN6SG2x0dNfiGuI
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

186641

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\25\42\Should\1\1\Off\Party\44\19\28\age\5\Point\93\thousand.pdb

kernel32

CreateProcessW GetCurrentThreadId RemoveDirectoryW DeviceIoControl GetCurrentProcess Sleep LoadLibraryW GetProcAddress VirtualProtect GetWindowsDirectoryW GetCurrentDirectoryW GetTempPathW RaiseException RtlUnwind GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetLastError TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc InitializeCriticalSection SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar CreateFileA GetCPInfo GetACP GetOEMCP LoadLibraryA ReadFile SetEndOfFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

Sharing

General

Malware Config

Signatures

File Explorer

0704068b7be5426f38f2da38c965d04e_JaffaCakes118

kernel32

generic