4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118
Size 367KB
Sample240516-27rdlsdf74
SHA256 40d37fd4c14457aee5abb8dc6de4c965a11a02d49b9bfda693d2a9d602a0e1f9
MD5 4d7ef2a7aeb9b35edc5258c74ad0f7d5
SHA1 f5f3188c27c3f9b3b2e96dbd730d531b09800fac
SHA512 b3e37cba043f09c03efed2fa075051878fdcb4adcba8e98198aabd706c0053dea6100a1a0e57a73d55246da0982b7bf2a15fa8ff6c77c11f7ae54f1493e53c7d
SSDEEP 3072:xNCZ+we8ZLbmHWSNsPZZC/WJi8FSmOEszj7QG08eucG2ocawpU2up02pGlJMuMGp:xNCMwe8dmHQPZwmGzj78uV8Gp0KySC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118

File Explorer

4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118

.exe 367KB

4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118

IMPHASH e6f5a362d4b38dcd2ad3b5b6f563f501
SHA256 40d37fd4c14457aee5abb8dc6de4c965a11a02d49b9bfda693d2a9d602a0e1f9
MD5 4d7ef2a7aeb9b35edc5258c74ad0f7d5
SHA1 f5f3188c27c3f9b3b2e96dbd730d531b09800fac
SHA512 b3e37cba043f09c03efed2fa075051878fdcb4adcba8e98198aabd706c0053dea6100a1a0e57a73d55246da0982b7bf2a15fa8ff6c77c11f7ae54f1493e53c7d
SSDEEP 3072:xNCZ+we8ZLbmHWSNsPZZC/WJi8FSmOEszj7QG08eucG2ocawpU2up02pGlJMuMGp:xNCMwe8dmHQPZwmGzj78uV8Gp0KySC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ddraw

DirectDrawCreate

kernel32

GetConsoleMode GetConsoleCP _lclose FlushFileBuffers CompareStringW CompareStringA GetTimeZoneInformation ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetModuleHandleA FindResourceA LoadResource LockResource _lopen SetEnvironmentVariableA _lread OutputDebugStringA InitializeCriticalSection LCMapStringW LCMapStringA HeapAlloc GetLastError HeapFree RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate HeapDestroy GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW CreateFileA

user32

LoadCursorA RegisterClassExA GetSystemMetrics CreateWindowExA ShowWindow PeekMessageA DispatchMessageA DestroyWindow DefWindowProcA ShowCursor SendMessageA PostQuitMessage LoadImageA TranslateMessage

gdi32

CreateFontA SetTextColor SetBkColor SetBkMode TextOutA DeleteObject GetPixel SetPixel CreateCompatibleDC SelectObject GetObjectA StretchBlt DeleteDC GetStockObject

advapi32

SetFileSecurityW

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

4d7ef2a7aeb9b35edc5258c74ad0f7d5_JaffaCakes118

ddraw

kernel32

user32

gdi32

advapi32

shell32

generic