14ae083c45e4b46dc733793e3dff011e_JaffaCakes118

General

Target
14ae083c45e4b46dc733793e3dff011e_JaffaCakes118
Size 1.0MB
Sample240504-1zd8mscf9s
SHA256 7c6cabb2947366e8714488c74f12a1c2e62306b4ee5d0dc34b7699c989cb0c9f
MD5 14ae083c45e4b46dc733793e3dff011e
SHA1 bf1add73682a3c955d9e17863712b6872e5f714f
SHA512 5280a9f4aaf539270da8d1482454347a2996475606732fd103b7bcaae0797d1ebdd672dd851ef49ded3cc071c140e1d24e59d6f0bd6067327716344c2ede81ac
SSDEEP 24576:n34InDY4actOWkcdsheccyFzNPO0wzqoIploT8Tw6k:37nDB1hkcdHcNFzNPOjqohC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ae083c45e4b46dc733793e3dff011e_JaffaCakes118

File Explorer

14ae083c45e4b46dc733793e3dff011e_JaffaCakes118

.exe 1.0MB

14ae083c45e4b46dc733793e3dff011e_JaffaCakes118

IMPHASH 89315754d14c0353d1a39a7dd7c8287f
SHA256 7c6cabb2947366e8714488c74f12a1c2e62306b4ee5d0dc34b7699c989cb0c9f
MD5 14ae083c45e4b46dc733793e3dff011e
SHA1 bf1add73682a3c955d9e17863712b6872e5f714f
SHA512 5280a9f4aaf539270da8d1482454347a2996475606732fd103b7bcaae0797d1ebdd672dd851ef49ded3cc071c140e1d24e59d6f0bd6067327716344c2ede81ac
SSDEEP 24576:n34InDY4actOWkcdsheccyFzNPO0wzqoIploT8Tw6k:37nDB1hkcdHcNFzNPOjqohC
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

40252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CloseHandle ReleaseSemaphore CreateSemaphoreA GetProcessHeap HeapFree WaitForSingleObjectEx WaitForMultipleObjectsEx CreateEventA HeapAlloc GetLastError QueryPerformanceCounter QueryPerformanceFrequency SetEvent ResetEvent OpenEventA SetWaitableTimer Sleep GetCurrentProcessId GetCurrentThreadId ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleA GetProcAddress CreateWaitableTimerA WriteConsoleW WideCharToMultiByte SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind RaiseException EncodePointer FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType SetStdHandle GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Name

.text

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.mmdd

Size

512B

Virtual Size

499B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

291KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

616KB

Virtual Size

615KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

14ae083c45e4b46dc733793e3dff011e_JaffaCakes118

kernel32

generic