3e61776529c789431986ae0614c009f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
3e61776529c789431986ae0614c009f3_JaffaCakes118
Size 885KB
Sample240513-jdhkhafe56
SHA256 23a619dcaf78db0d10dcf120a45e2042d36635578a62be7b5c9e9c444e4a5b5d
MD5 3e61776529c789431986ae0614c009f3
SHA1 ca01bdcb68012ae37673fd1f1cd89b8044be3d0d
SHA512 3ddb1db9c0a0c2f56eeaa37cec5c0e027d780c2324f5e5cdae655e2f98a8fefff437940166cb742cb02ea9426caf260722812d45da8fb818d8f313e931eaeb4a
SSDEEP 24576:7cPIzwFP0KRG21hri1e2pfvGePhYzxKjyxV:7wiKRrhrgxGePhYzxsG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e61776529c789431986ae0614c009f3_JaffaCakes118

File Explorer

3e61776529c789431986ae0614c009f3_JaffaCakes118

.exe 885KB

3e61776529c789431986ae0614c009f3_JaffaCakes118

IMPHASH f4fdc4ba6b5dcd89991eba43efda41e5
SHA256 23a619dcaf78db0d10dcf120a45e2042d36635578a62be7b5c9e9c444e4a5b5d
MD5 3e61776529c789431986ae0614c009f3
SHA1 ca01bdcb68012ae37673fd1f1cd89b8044be3d0d
SHA512 3ddb1db9c0a0c2f56eeaa37cec5c0e027d780c2324f5e5cdae655e2f98a8fefff437940166cb742cb02ea9426caf260722812d45da8fb818d8f313e931eaeb4a
SSDEEP 24576:7cPIzwFP0KRG21hri1e2pfvGePhYzxKjyxV:7wiKRrhrgxGePhYzxsG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

223240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ryanch\MyBranches\DEV-MIP-Geocomply\src\MicrogamingInstall\Release\MicrogamingInstall.pdb

kernel32

FormatMessageA WriteFile GetVolumePathNameW CopyFileW FormatMessageW ReadFile GetModuleFileNameW FindFirstFileA GetProcAddress FindClose RemoveDirectoryW FindNextFileA GetModuleHandleA ReleaseMutex GetVersionExA DeleteFileW FreeLibrary SetEvent GetPrivateProfileStringW CreateEventA CreateDirectoryA LoadLibraryA CreateMutexA LocalFree lstrcpynA GetDriveTypeA GetVolumeInformationA DeviceIoControl InterlockedDecrement MoveFileExA Process32First GetFileAttributesA TerminateProcess GetSystemDirectoryA GetLastError GetLocalTime Process32Next CreateToolhelp32Snapshot lstrlenA lstrcpynW GetFileAttributesW lstrlenW lstrcpyA InterlockedIncrement GetPrivateProfileIntA InterlockedExchange GetExitCodeThread WaitForMultipleObjects GetCurrentThreadId CreateThread SetEndOfFile LeaveCriticalSection EnterCriticalSection SetLastError CreateSemaphoreA ReleaseSemaphore GetLogicalDriveStringsA GlobalMemoryStatusEx GetSystemInfo GetDiskFreeSpaceExA CreateDirectoryW SetThreadPriority GetCurrentThread GetThreadTimes ResumeThread CompareStringW WriteConsoleW GetTimeZoneInformation GetProcessHeap SetStdHandle GetStringTypeW HeapSize FlushFileBuffers GetConsoleMode GetConsoleCP IsProcessorFeaturePresent GetCurrentDirectoryW PeekNamedPipe GetFileInformationByHandle GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType SetHandleCount LCMapStringW HeapCreate IsValidCodePage GetOEMCP GetACP GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetStdHandle MoveFileA RaiseException RtlUnwind GetFullPathNameA GetDriveTypeW SetCurrentDirectoryA GetCurrentDirectoryA SetEnvironmentVariableA FindFirstFileExA FileTimeToLocalFileTime FileTimeToSystemTime GetStartupInfoW HeapSetInformation GetCommandLineA SetFilePointer GetFileSize GetComputerNameA DeleteFileA GetTempPathA GetCurrentProcessId GetTempFileNameA GetModuleFileNameA CopyFileA RemoveDirectoryA lstrcmpiA CreateProcessA Sleep OpenProcess MapViewOfFile WaitForSingleObject CreateProcessW CreateFileA OutputDebugStringA WideCharToMultiByte CloseHandle CreateFileMappingA MultiByteToWideChar CreateFileW GetEnvironmentVariableA HeapReAlloc HeapFree ExitThread GetSystemTimeAsFileTime HeapAlloc ExitProcess GetModuleHandleW EncodePointer DecodePointer SetFileAttributesA

user32

LoadCursorA AdjustWindowRect EnableWindow UpdateWindow MapWindowPoints LoadImageA IsWindowVisible GetSystemMetrics RegisterClassW MessageBoxW DispatchMessageA RegisterClassA CreatePopupMenu SetLayeredWindowAttributes GetCursorPos GetDlgCtrlID SetWindowLongW ReleaseDC PeekMessageA AppendMenuW GetWindowLongW SetWindowLongA OffsetRect ChildWindowFromPoint TranslateMessage IsDialogMessageA SendMessageA GetClientRect IsWindowEnabled LoadIconA DefWindowProcW MoveWindow FlashWindowEx CreateWindowExA DefWindowProcA SetWindowPos ShowWindow DestroyWindow SendMessageTimeoutA wvsprintfA SetForegroundWindow GetWindowDC TrackPopupMenu GetWindowRect PostMessageA SetWindowTextA MessageBoxA SetFocus CopyRect wsprintfW InvalidateRect wsprintfA CreateWindowExW PostThreadMessageA GetActiveWindow GetMessageA

gdi32

DeleteDC CreateDIBSection GetDIBits DeleteObject SelectObject CreateCompatibleDC GetStockObject BitBlt

advapi32

RegCloseKey RegOpenKeyExW RegCreateKeyExW RegEnumKeyW OpenSCManagerA CloseServiceHandle OpenServiceA RegSetValueExW RegQueryValueExW RegSetValueW RegSetValueA FreeSid GetUserNameA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA RegQueryValueW

shell32

SHGetFolderPathW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderLocation Shell_NotifyIconA SHGetSpecialFolderPathA SHChangeNotify ShellExecuteA

ole32

StringFromIID CoInitialize CoUninitialize CoSetProxyBlanket CoTaskMemAlloc CoCreateGuid CoCreateInstance OleUninitialize OleInitialize OleCreate OleSetContainedObject CLSIDFromProgID CoTaskMemFree

oleaut32

VariantTimeToSystemTime VariantCopy VariantChangeType SysStringLen SafeArrayUnaccessData VariantInit SafeArrayAccessData SafeArrayCreateVector VariantClear SysFreeString SysAllocString SysAllocStringLen

wsock32

WSAStartup gethostbyname inet_addr ioctlsocket htonl WSAGetLastError htons ntohs getservbyport getservbyname WSASetLastError gethostbyaddr WSACleanup

wininet

InternetConnectA InternetOpenUrlA InternetCrackUrlA InternetOpenA InternetQueryOptionA HttpSendRequestA HttpOpenRequestA InternetSetOptionA InternetGetLastResponseInfoA HttpQueryInfoA InternetReadFile InternetOpenUrlW InternetOpenW InternetCreateUrlA InternetCrackUrlW InternetCloseHandle

shlwapi

PathAppendA SHDeleteKeyA PathCanonicalizeW PathAppendW StrStrA PathCanonicalizeA

psapi

GetModuleFileNameExA

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

ws2_32

WSAAddressToStringA

urlmon

CoInternetGetSession

Sharing

General

Malware Config

Signatures

File Explorer

3e61776529c789431986ae0614c009f3_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wsock32

wininet

shlwapi

psapi

version

ws2_32

urlmon

generic