2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118
Size 315KB
Sample240510-mgff4acf45
SHA256 8dcaf4a7db1469a9da01fb183bc1369a8067ae081dc8074ab9fa5d6ccb150292
MD5 2eaa85a17c04051ac6d62ec3e3e3990d
SHA1 15cb004c746ed141e39a752acd88bc8e78a565f1
SHA512 332371e6b6707265d02134c533d44144910ab36c154f87b3edd2bac4158a4df4da995de6b4f7655fd6e1ad657bdba651585df02a1e607ac4c843db4faa94e9fd
SSDEEP 3072:wQjJFH9xHfYxWLHvXZJ9hu2aB1wDRqVxaM5P6nnE6BWlNtZ4gshEfpLEL3MpoaKk:wyLdxHfYxWphRaimx96nn/ynshJ/Mn9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118

File Explorer

2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118

.exe 315KB

2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118

IMPHASH 79360a69c0dd124ba7c718cfddce3eed
SHA256 8dcaf4a7db1469a9da01fb183bc1369a8067ae081dc8074ab9fa5d6ccb150292
MD5 2eaa85a17c04051ac6d62ec3e3e3990d
SHA1 15cb004c746ed141e39a752acd88bc8e78a565f1
SHA512 332371e6b6707265d02134c533d44144910ab36c154f87b3edd2bac4158a4df4da995de6b4f7655fd6e1ad657bdba651585df02a1e607ac4c843db4faa94e9fd
SSDEEP 3072:wQjJFH9xHfYxWLHvXZJ9hu2aB1wDRqVxaM5P6nnE6BWlNtZ4gshEfpLEL3MpoaKk:wyLdxHfYxWphRaimx96nn/ynshJ/Mn9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34644

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread WriteConsoleW InitializeCriticalSection IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA ReadFile GetProcessHeap SetEndOfFile GetLocaleInfoA GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleA IsValidCodePage GetOEMCP GetACP GetCPInfo SetFilePointer CreateFileW TerminateThread LoadLibraryA FlushFileBuffers GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RaiseException GetConsoleMode GetConsoleCP WideCharToMultiByte HeapSize GetCurrentThreadId SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc SetEvent lstrcpyA DeleteFileA CloseHandle GetVersionExA EndUpdateResourceA GetModuleHandleA FindNextFileA GetModuleFileNameA CreatePipe BeginUpdateResourceA OpenEventA LockResource FindClose SetFileAttributesA RemoveDirectoryA GetLastError FindFirstFileA MultiByteToWideChar lstrcatA GetModuleFileNameW CreateProcessA HeapCreate CreateEventA FreeConsole SizeofResource LoadLibraryW AllocateUserPhysicalPages WriteFile WaitForSingleObject GetCurrentProcess InterlockedDecrement TlsGetValue HeapReAlloc GlobalAddAtomA VirtualAlloc DeleteCriticalSection VirtualFree UpdateResourceA HeapAlloc LoadResource FreeLibrary lstrcpynA lstrlenA FindResourceA GetFileType GetStdHandle CreateFileA InitializeCriticalSectionAndSpinCount HeapFree RtlUnwind ExitProcess GetProcAddress Sleep GetModuleHandleW LeaveCriticalSection EnterCriticalSection GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess DebugBreak

user32

GetWindowThreadProcessId DrawFrameControl GetWindow MoveWindow FindWindowA SetClipboardData EnableWindow SetWindowTextA GetSystemMetrics OpenClipboard GetActiveWindow IsDlgButtonChecked ShowWindow GetCursorPos GetSysColor DefWindowProcA GetDlgItem ToUnicodeEx DestroyIcon PostThreadMessageA PeekMessageA EndPaint DestroyWindow GetMessageA CloseClipboard GetDlgItemInt ScreenToClient GetWindowRect SendInput PostQuitMessage SetCapture CopyImage LoadBitmapA GetParent LoadIconA CallNextHookEx wsprintfA WindowFromPoint GetClientRect SendMessageA BeginPaint GetDC GetKeyboardState SetDlgItemInt GetKeyboardLayout TrackPopupMenuEx SetWindowLongA MessageBoxA InvalidateRect SetCursorPos MapVirtualKeyExA GetWindowLongA CreateWindowExA ReleaseDC EmptyClipboard

gdi32

SetBrushOrgEx CreateSolidBrush BitBlt PatBlt GetTextExtentPoint32A SetWindowExtEx DeleteDC GetDeviceCaps StretchBlt CreateFontIndirectA CreateMetaFileA CreateBitmap SetBkMode DeleteObject SelectObject CreateCompatibleDC CombineRgn SetMapMode CreateCompatibleBitmap SaveDC CreateRectRgn CreatePatternBrush GetTextMetricsA SetTextAlign GetObjectA GetStockObject ExtTextOutA

advapi32

SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

SHFileOperationA

ole32

CoInitialize CLSIDFromString CoUninitialize CoCreateInstance

oleaut32

SafeArrayGetUBound SysFreeString SafeArrayPtrOfIndex SafeArrayGetElement VariantChangeType VariantInit SafeArrayCreate VariantCopy VariantClear SafeArrayGetLBound SysAllocString

ws2_32

inet_ntoa ntohs WSAGetLastError

winscard

SCardListReadersA SCardConnectA g_rgSCardT1Pci SCardTransmit SCardGetCardTypeProviderNameA SCardForgetReaderA SCardEstablishContext

version

GetFileVersionInfoW

iphlpapi

GetTcpTable

shlwapi

PathRemoveFileSpecA

comctl32

ImageList_Create ImageList_ReplaceIcon ord17

activeds

ord6 ord4 ord3

imm32

ImmAssociateContext

setupapi

SetupDiEnumDeviceInfo CM_Get_Child CM_Get_Class_Key_NameA SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA

Sharing

General

Malware Config

Signatures

File Explorer

2eaa85a17c04051ac6d62ec3e3e3990d_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

winscard

version

iphlpapi

shlwapi

comctl32

activeds

imm32

setupapi

generic