155a771c11eac28a7f6057581960ecab_JaffaCakes118

General

Target
155a771c11eac28a7f6057581960ecab_JaffaCakes118
Size 116KB
Sample240505-brs96aab61
SHA256 81025072a5e647bdd0589f7a50b68a16b119f63d7adeafb7aa32a2acf9d60a11
MD5 155a771c11eac28a7f6057581960ecab
SHA1 c4edeb6cadfad30c33ef080c90b7ca0ca898884c
SHA512 b7645731e3f07aecdfb81961d080ed0a336fb9247dcb84de2900998da33ce3c94e7f4d7ee4228e6adb6bbf66777dcb1fae2c7892abc47d1f30eb50216c59f60a
SSDEEP 3072:cChC6NAN/FuTmngEyyIVVowmAS8n34aQSxyT9:c0CTN/gTagEyxZjDILS8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155a771c11eac28a7f6057581960ecab_JaffaCakes118

File Explorer

155a771c11eac28a7f6057581960ecab_JaffaCakes118

.exe 116KB

155a771c11eac28a7f6057581960ecab_JaffaCakes118

IMPHASH cce7bbce77610b9130eb5d1f4d659541
SHA256 81025072a5e647bdd0589f7a50b68a16b119f63d7adeafb7aa32a2acf9d60a11
MD5 155a771c11eac28a7f6057581960ecab
SHA1 c4edeb6cadfad30c33ef080c90b7ca0ca898884c
SHA512 b7645731e3f07aecdfb81961d080ed0a336fb9247dcb84de2900998da33ce3c94e7f4d7ee4228e6adb6bbf66777dcb1fae2c7892abc47d1f30eb50216c59f60a
SSDEEP 3072:cChC6NAN/FuTmngEyyIVVowmAS8n34aQSxyT9:c0CTN/gTagEyxZjDILS8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadWritePtr VirtualAlloc WriteFile VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW SetUnhandledExceptionFilter FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter LCMapStringW LCMapStringA MultiByteToWideChar GetProcAddress HeapSize IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP LoadLibraryA GetStringTypeA GetStringTypeW GetLastError CompareStringA CompareStringW SetEnvironmentVariableA RaiseException SetFilePointer FlushFileBuffers CloseHandle LoadLibraryExA ReadFile GetEnvironmentStrings WideCharToMultiByte GetTimeZoneInformation GetSystemTime GetLocalTime RtlUnwind GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapReAlloc HeapAlloc TerminateProcess GetCurrentProcess SetStdHandle

user32

DefWindowProcA GetClientRect InvalidateRect DestroyWindow BeginPaint DrawTextA EndPaint PostQuitMessage CreateWindowExA LoadIconA RegisterClassExA LoadStringA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA ShowWindow GetSysColorBrush GetSysColor FillRect ReleaseCapture PtInRect LoadCursorA SetCursor UpdateWindow SetCapture CheckRadioButton SetDlgItemInt GetSystemMenu AppendMenuA SetMenuDefaultItem GetDC DrawEdge IsDlgButtonChecked ReleaseDC EndDialog DialogBoxParamA

gdi32

RealizePalette CreateHalftonePalette SelectPalette StretchDIBits BeginPath MoveToEx LineTo EndPath StrokeAndFillPath CreateBrushIndirect Ellipse CreatePen Rectangle SetROP2 CreateSolidBrush SelectObject SetBkColor DeleteObject LPtoDP GetPixel

Sharing

General

Malware Config

Signatures

File Explorer

155a771c11eac28a7f6057581960ecab_JaffaCakes118

kernel32

user32

gdi32

generic