2e32cca5cd940f4c904e3275433d8243_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2e32cca5cd940f4c904e3275433d8243_JaffaCakes118
Size 152KB
Sample240510-j83txscf3w
SHA256 f12da0eaa5c9c9f139d7bf1814b93fc7eeaa17e7646c9ee1d03a855eb7ea099a
MD5 2e32cca5cd940f4c904e3275433d8243
SHA1 f3d8ae42030c633b59aca05b7b6ef8cd8c399f07
SHA512 cc5b3843bad402f181e9137f8d2708b1aff1109982e1b0d2b5fe54ada7eb58d6159d911f9702b61546f364f45adc82d21e6e53db10c2559eb07840c78b583499
SSDEEP 3072:1/MkQHFH+/nFRm3OslxQzAmnqvai+oW2ImibhvlE:4FefmNSAmnCxGv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e32cca5cd940f4c904e3275433d8243_JaffaCakes118

File Explorer

2e32cca5cd940f4c904e3275433d8243_JaffaCakes118

.exe 152KB

2e32cca5cd940f4c904e3275433d8243_JaffaCakes118

IMPHASH 63d9a32ebdd5daf5801711100aa2574b
SHA256 f12da0eaa5c9c9f139d7bf1814b93fc7eeaa17e7646c9ee1d03a855eb7ea099a
MD5 2e32cca5cd940f4c904e3275433d8243
SHA1 f3d8ae42030c633b59aca05b7b6ef8cd8c399f07
SHA512 cc5b3843bad402f181e9137f8d2708b1aff1109982e1b0d2b5fe54ada7eb58d6159d911f9702b61546f364f45adc82d21e6e53db10c2559eb07840c78b583499
SSDEEP 3072:1/MkQHFH+/nFRm3OslxQzAmnqvai+oW2ImibhvlE:4FefmNSAmnCxGv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep FreeLibrary CompareStringW CompareStringA ReadFile SetEndOfFile GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter InterlockedExchange GetOEMCP GetACP CreateFileA FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA VirtualQuery GetSystemInfo GlobalAlloc GetCPInfo GetLocaleInfoA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile CloseHandle LCMapStringW MultiByteToWideChar LCMapStringA GetTimeZoneInformation WideCharToMultiByte HeapSize GlobalLock GlobalUnlock GetCurrentProcess GetExitCodeProcess ExitProcess OutputDebugStringA GetLastError GetComputerNameA lstrcpyA lstrcatA IsBadReadPtr VirtualAlloc LoadLibraryA VirtualProtect GetProcAddress TerminateProcess IsBadWritePtr HeapReAlloc VirtualFree HeapCreate HeapDestroy RaiseException SetEnvironmentVariableA GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA HeapFree GetSystemTimeAsFileTime RtlUnwind HeapAlloc

user32

ReleaseDC ShowWindow wsprintfA MessageBoxA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DeleteMenu GetSystemMenu GetClientRect GetWindowRect SystemParametersInfoA SetWindowPos AdjustWindowRectEx ValidateRect GetMenu PostQuitMessage PeekMessageA SendMessageA GetMessageA TranslateMessage DispatchMessageA WaitMessage DefWindowProcA UnregisterClassA DestroyWindow LoadCursorA RegisterClassExA SetRect AdjustWindowRect CreateWindowExA GetDC UpdateWindow SetFocus GetWindowLongA SetWindowLongA

winmm

timeGetTime

d3d8

Direct3DCreate8

wsock32

bind WSAStartup send recv connect closesocket htons getservbyname socket WSACleanup gethostbyname

Sharing

General

Malware Config

Signatures

File Explorer

2e32cca5cd940f4c904e3275433d8243_JaffaCakes118

kernel32

user32

winmm

d3d8

wsock32

generic