4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

General

Target
4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118
Size 201KB
Sample240516-ts2l2adc74
SHA256 60227c61219bfba2a397ff898e998e41bea302741edf2e6b68a5a389302c43ef
MD5 4bf758a65fe7dc8f879571f9bf5faf1b
SHA1 dc8898166de5788b9573833378af95c774f66dc6
SHA512 60872aacc14b5ea6bbdcc10039e9b016aa82cedd844d7c39c61ec4e4c2d07e36dfb6b0ab9ea619da3ba0c4cc141adac62a85d83a46b44e68d942ba10774bb4d5
SSDEEP 6144:jXwU1iLEG7znkvOc009BbnUBah3nafO80Ha1:L1OEhOUBbn7Y1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

File Explorer

4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

.exe 201KB

4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

IMPHASH bb547e2d6b5bf0544a7381258a9f4710
SHA256 60227c61219bfba2a397ff898e998e41bea302741edf2e6b68a5a389302c43ef
MD5 4bf758a65fe7dc8f879571f9bf5faf1b
SHA1 dc8898166de5788b9573833378af95c774f66dc6
SHA512 60872aacc14b5ea6bbdcc10039e9b016aa82cedd844d7c39c61ec4e4c2d07e36dfb6b0ab9ea619da3ba0c4cc141adac62a85d83a46b44e68d942ba10774bb4d5
SSDEEP 6144:jXwU1iLEG7znkvOc009BbnUBah3nafO80Ha1:L1OEhOUBbn7Y1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA WritePrivateProfileStructA GetNumberOfConsoleInputEvents FindResourceExW LoadLibraryExW ReadConsoleA InterlockedDecrement CompareFileTime GetUserDefaultLCID InterlockedCompareExchange OpenSemaphoreA CallNamedPipeW FreeEnvironmentStringsA _lclose SetTapeParameters CreateNamedPipeW GetSystemTimeAsFileTime WriteFile TlsSetValue GlobalAlloc Sleep GetVersionExW DeleteVolumeMountPointW IsDBCSLeadByte lstrcatA SetThreadPriority GlobalUnlock DisconnectNamedPipe DeactivateActCtx CreateJobObjectA GetLastError GetProcAddress BeginUpdateResourceW SetVolumeLabelW WriteProfileSectionA IsValidCodePage EnterCriticalSection _hwrite GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc SetCurrentDirectoryW SetFileApisToANSI WaitForMultipleObjects GetPrivateProfileSectionNamesA GetOEMCP EnumDateFormatsA WaitCommEvent GetModuleHandleA GetCommTimeouts RequestWakeupLatency LocalSize lstrcpyA GetModuleHandleW ExitProcess GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

4bf758a65fe7dc8f879571f9bf5faf1b_JaffaCakes118

kernel32

generic