3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118

General

Target
3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118
Size 833KB
Sample240513-ll5fcahf52
SHA256 cce23bc242112a8a6b0d53344a3e6b6a7b8e026177aecc06839a578bb5b375c5
MD5 3eda2019bd43285b3b73fdbc0c3fe153
SHA1 5ace60202599fc5c2253777023806328a1ac6960
SHA512 58f8155c6cd12a8a2faa0bafbf824e7df2dd18cb4f4adcc3cf408d66f25c1532d612dacd30e0df86f145395b5d98b562fb966f565d245422f26073f9b23a9641
SSDEEP 12288:lh2kMz5guFqFVuktQufvSu1B25UJYYsl/CtZlXz9l2T3Yvr6PPUiPHmyA9jiU95A:lh2mtQia1oYY0qZlXzq3YvO9Q+U3Wj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118

File Explorer

3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118

.exe 833KB

3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118

IMPHASH 2813e24c3d403c09466c46b02890987c
SHA256 cce23bc242112a8a6b0d53344a3e6b6a7b8e026177aecc06839a578bb5b375c5
MD5 3eda2019bd43285b3b73fdbc0c3fe153
SHA1 5ace60202599fc5c2253777023806328a1ac6960
SHA512 58f8155c6cd12a8a2faa0bafbf824e7df2dd18cb4f4adcc3cf408d66f25c1532d612dacd30e0df86f145395b5d98b562fb966f565d245422f26073f9b23a9641
SSDEEP 12288:lh2kMz5guFqFVuktQufvSu1B25UJYYsl/CtZlXz9l2T3Yvr6PPUiPHmyA9jiU95A:lh2mtQia1oYY0qZlXzq3YvO9Q+U3Wj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

100962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA SetCurrentDirectoryA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId CloseHandle WaitForSingleObject FreeLibrary DeleteCriticalSection VirtualProtect LoadLibraryA GetTempPathW VirtualAlloc GetCommandLineW GetTickCount CreateEventA Sleep SetEvent GetCurrentProcessId GetCurrentProcess GetFullPathNameW CopyFileW DeleteFileW GetTempPathA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA GetProcAddress FindResourceW GetLastError HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

AddAuditAccessAce CryptDestroyKey CryptContextAddRef

comctl32

DrawStatusTextW ImageList_GetBkColor ImageList_ReplaceIcon

Sharing

General

Malware Config

Signatures

File Explorer

3eda2019bd43285b3b73fdbc0c3fe153_JaffaCakes118

kernel32

advapi32

comctl32

generic