152f259addce46dc95df6c65923925ed_JaffaCakes118

General

Target
152f259addce46dc95df6c65923925ed_JaffaCakes118
Size 674KB
Sample240505-ax2caabh85
SHA256 6be3f722a9d961b2b5e056c222ea5abc6c2bbe7825e0dd0e7ec773916e6e5445
MD5 152f259addce46dc95df6c65923925ed
SHA1 e4e539de3617dd8796c8993fdecb490e9cbf7897
SHA512 b9eb5410848330ef82d3df3c56bd9066d10b9c84c5efbcb2fb9cc88116e871430bd40c9d3677b3df6dd3fbbf2780dd15d164e9f60e646657b35bc3c549c940fc
SSDEEP 12288:Voq34p7sxKjVGTmxorl7XZ8xmhmMvaBneNKpq7rYc9lRB00zqS1QwUZxvQY98gjk:foLoThNXgcaINKpL6lM0F1QwUZxvQYvI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152f259addce46dc95df6c65923925ed_JaffaCakes118

File Explorer

152f259addce46dc95df6c65923925ed_JaffaCakes118

.exe 674KB

152f259addce46dc95df6c65923925ed_JaffaCakes118

IMPHASH 9b9a9e20a6b222e5934c60e3748f73a3
SHA256 6be3f722a9d961b2b5e056c222ea5abc6c2bbe7825e0dd0e7ec773916e6e5445
MD5 152f259addce46dc95df6c65923925ed
SHA1 e4e539de3617dd8796c8993fdecb490e9cbf7897
SHA512 b9eb5410848330ef82d3df3c56bd9066d10b9c84c5efbcb2fb9cc88116e871430bd40c9d3677b3df6dd3fbbf2780dd15d164e9f60e646657b35bc3c549c940fc
SSDEEP 12288:Voq34p7sxKjVGTmxorl7XZ8xmhmMvaBneNKpq7rYc9lRB00zqS1QwUZxvQY98gjk:foLoThNXgcaINKpL6lM0F1QwUZxvQYvI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Codes\Version7\SHOWDIB1\Release\SHOWDIB1.pdb

kernel32

VirtualProtect IsProcessorFeaturePresent HeapReAlloc GetStringTypeW MultiByteToWideChar LCMapStringW HeapSize RtlUnwind DeleteFileW LoadLibraryW Sleep IsValidCodePage GetOEMCP GetACP GetCPInfo EnterCriticalSection LeaveCriticalSection WriteFile CloseHandle ReadFile GetFileSize CreateFileW HeapAlloc GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement GetProcAddress ExitProcess GetStdHandle GetModuleFileNameW HeapCreate GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException

user32

DestroyWindow DefWindowProcW EndPaint BeginPaint InvalidateRect ShowCursor SetCursor EnableMenuItem DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW UpdateWindow ShowWindow CreateWindowExW MessageBoxW RegisterClassW LoadCursorW LoadIconW PostQuitMessage GetSystemMetrics

gdi32

GetStockObject SetDIBitsToDevice

comdlg32

GetOpenFileNameW GetSaveFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

152f259addce46dc95df6c65923925ed_JaffaCakes118

kernel32

user32

gdi32

comdlg32

generic