51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118

General

Target
51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118
Size 174KB
Sample240517-2pbkfafb25
SHA256 655fdfecb6a852a5ed95da44a6b9fa1611bc7017119778912b3c0e2ac5e51138
MD5 51dc3cde0cb2f8b7f6da3ca243a526c0
SHA1 4cd72154bd63384db36622d00224fd1d6d5f9a91
SHA512 e55fe1a73d2b55cef8e0f2ace93d15f511efa5767d63e70c227bbd99e45c975a371a7e11d8adb98b26ec9c51d59f8f1bc922387a87fd72dc74a5ad709282b0a2
SSDEEP 3072:eaVDUa/FS8rckfWpHd81V4Ac2CCgJLeLnrzvonYgn54tpI9:evmFSOfQAcCYerrz+VOn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118

File Explorer

51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118

.exe 174KB

51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118

IMPHASH 9a08a1143fc7707493703e36e042ec35
SHA256 655fdfecb6a852a5ed95da44a6b9fa1611bc7017119778912b3c0e2ac5e51138
MD5 51dc3cde0cb2f8b7f6da3ca243a526c0
SHA1 4cd72154bd63384db36622d00224fd1d6d5f9a91
SHA512 e55fe1a73d2b55cef8e0f2ace93d15f511efa5767d63e70c227bbd99e45c975a371a7e11d8adb98b26ec9c51d59f8f1bc922387a87fd72dc74a5ad709282b0a2
SSDEEP 3072:eaVDUa/FS8rckfWpHd81V4Ac2CCgJLeLnrzvonYgn54tpI9:evmFSOfQAcCYerrz+VOn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfoExW GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection LocalAlloc GetConsoleAliasesW GetVolumePathNamesForVolumeNameA GetModuleHandleA OpenFileMappingW GetThreadTimes IsDBCSLeadByte ReadConsoleOutputA EndUpdateResourceW AllocConsole CreateEventW MoveFileExA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetFilePointer Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

advapi32

RegFlushKey GetSecurityDescriptorOwner AllocateLocallyUniqueId SetAclInformation AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

51dc3cde0cb2f8b7f6da3ca243a526c0_JaffaCakes118

kernel32

advapi32

generic