29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118
Size 152KB
Sample240509-nfdrjshd95
SHA256 4635e93db06e7d975bc9c6619cb06078ac9aa37b46d7afeeba8909cf6e31ef53
MD5 29b800b07ff3fa0ba34a51042fd62cce
SHA1 b76233d7740deccdd4f5779c01a9aae4ad7248be
SHA512 68be91f8289206415672fcfa9307abae8ddae2f90c645de23363f5433b0c8ac2e92e745cb06399e7d8e9e2e29cde01253651663088714793743fe6147a3ccfc0
SSDEEP 3072:1/MkQHFH+/nFRm3UslxQzAmnqvai+oW2ImibhvlE:4FefmXSAmnCxGv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118

File Explorer

29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118

.exe 152KB

29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118

IMPHASH 63d9a32ebdd5daf5801711100aa2574b
SHA256 4635e93db06e7d975bc9c6619cb06078ac9aa37b46d7afeeba8909cf6e31ef53
MD5 29b800b07ff3fa0ba34a51042fd62cce
SHA1 b76233d7740deccdd4f5779c01a9aae4ad7248be
SHA512 68be91f8289206415672fcfa9307abae8ddae2f90c645de23363f5433b0c8ac2e92e745cb06399e7d8e9e2e29cde01253651663088714793743fe6147a3ccfc0
SSDEEP 3072:1/MkQHFH+/nFRm3UslxQzAmnqvai+oW2ImibhvlE:4FefmXSAmnCxGv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep FreeLibrary CompareStringW CompareStringA ReadFile SetEndOfFile GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter InterlockedExchange GetOEMCP GetACP CreateFileA FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA VirtualQuery GetSystemInfo GlobalAlloc GetCPInfo GetLocaleInfoA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile CloseHandle LCMapStringW MultiByteToWideChar LCMapStringA GetTimeZoneInformation WideCharToMultiByte HeapSize GlobalLock GlobalUnlock GetCurrentProcess GetExitCodeProcess ExitProcess OutputDebugStringA GetLastError GetComputerNameA lstrcpyA lstrcatA IsBadReadPtr VirtualAlloc LoadLibraryA VirtualProtect GetProcAddress TerminateProcess IsBadWritePtr HeapReAlloc VirtualFree HeapCreate HeapDestroy RaiseException SetEnvironmentVariableA GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA HeapFree GetSystemTimeAsFileTime RtlUnwind HeapAlloc

user32

ReleaseDC ShowWindow wsprintfA MessageBoxA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DeleteMenu GetSystemMenu GetClientRect GetWindowRect SystemParametersInfoA SetWindowPos AdjustWindowRectEx ValidateRect GetMenu PostQuitMessage PeekMessageA SendMessageA GetMessageA TranslateMessage DispatchMessageA WaitMessage DefWindowProcA UnregisterClassA DestroyWindow LoadCursorA RegisterClassExA SetRect AdjustWindowRect CreateWindowExA GetDC UpdateWindow SetFocus GetWindowLongA SetWindowLongA

winmm

timeGetTime

d3d8

Direct3DCreate8

wsock32

bind WSAStartup send recv connect closesocket htons getservbyname socket WSACleanup gethostbyname

Sharing

General

Malware Config

Signatures

File Explorer

29b800b07ff3fa0ba34a51042fd62cce_JaffaCakes118

kernel32

user32

winmm

d3d8

wsock32

generic