4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118
Size 364KB
Sample240517-cjnkdace91
SHA256 efa8f41e69124aa247d366c53838d9c24cb734cc04c9646fc5b9c0d9706fc261
MD5 4dfe63b67ac7f1fa42b36a64ce58167f
SHA1 28a17cea34f2b2bb497010c01dd1424d2d53606d
SHA512 4b6bbc1d182c21219de7797f187f19048b807dfe5d10bd8e99b973ee7dc30987e9e36f477b67429c29d50fad99d74601930573876d61a910bc59c50052bf6214
SSDEEP 6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANe:WBOO3VKID90TBEhx4O6ae
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118

File Explorer

4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118

.exe 364KB

4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118

IMPHASH 0885b2b2b5829577912d5197330fc416
SHA256 efa8f41e69124aa247d366c53838d9c24cb734cc04c9646fc5b9c0d9706fc261
MD5 4dfe63b67ac7f1fa42b36a64ce58167f
SHA1 28a17cea34f2b2bb497010c01dd1424d2d53606d
SHA512 4b6bbc1d182c21219de7797f187f19048b807dfe5d10bd8e99b973ee7dc30987e9e36f477b67429c29d50fad99d74601930573876d61a910bc59c50052bf6214
SSDEEP 6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANe:WBOO3VKID90TBEhx4O6ae
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26453

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFindExtensionA PathFindFileNameA

comdlg32

GetOpenFileNameA

kernel32

GetLocaleInfoW GetCurrentProcess LockResource SizeofResource LoadResource FindResourceA CloseHandle FindFirstFileA WriteFile ReadFile GetFileSize CreateFileA MoveFileA GetTempFileNameA LoadLibraryA GetModuleHandleA LoadLibraryW GetCurrentDirectoryA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidCodePage IsValidLocale EnumSystemLocalesA GetUserDefaultLCID DeleteFileA TerminateProcess Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar GetSystemTimeAsFileTime RaiseException RtlUnwind GetLastError HeapFree GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize GetACP GetOEMCP GetLocaleInfoA

user32

DialogBoxParamA SendMessageA GetDlgItem EndDialog LoadIconA MessageBoxA SetDlgItemTextA GetDlgItemTextA EnableWindow LoadBitmapA ShowWindow

gdi32

DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

4dfe63b67ac7f1fa42b36a64ce58167f_JaffaCakes118

shlwapi

comdlg32

kernel32

user32

gdi32

generic