4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118
Size 320KB
Sample240517-e8645ahf4t
SHA256 883c9caef4dca41384a6bc31657bab87c68d5249d6f191e88e5bda414148cb09
MD5 4e71930a812a2b5650e7e08eb2b10b34
SHA1 40599def367a05afb8045eb092110caff899a1f7
SHA512 ca7f4a5ea79af4416321ce52a7469081f36ff96311deb01b1cfdf966ee5abfde45d97435e0864030529f213575757cda10dc977c378ba1580f6eda39885c2afa
SSDEEP 6144:3RWyOBcbCJddzaUvV1+9LOx49dnkLp7oSROjAYEfMF2Ws92s6mWQuT:tCJb9YQ49q9oR8YSuT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118

File Explorer

4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118

.exe 320KB

4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118

IMPHASH 6f4980ce3dd96fe5b5a9239a84364534
SHA256 883c9caef4dca41384a6bc31657bab87c68d5249d6f191e88e5bda414148cb09
MD5 4e71930a812a2b5650e7e08eb2b10b34
SHA1 40599def367a05afb8045eb092110caff899a1f7
SHA512 ca7f4a5ea79af4416321ce52a7469081f36ff96311deb01b1cfdf966ee5abfde45d97435e0864030529f213575757cda10dc977c378ba1580f6eda39885c2afa
SSDEEP 6144:3RWyOBcbCJddzaUvV1+9LOx49dnkLp7oSROjAYEfMF2Ws92s6mWQuT:tCJb9YQ49q9oR8YSuT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

PlaySoundA

kernel32

ReadFile SetStdHandle LoadLibraryA GetOEMCP GetACP GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoW GetUserDefaultLCID CloseHandle SetFilePointer GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers IsBadCodePtr IsBadWritePtr IsBadReadPtr VirtualFree GetTickCount LoadLibraryExA GetLocaleInfoA GetLastError HeapCreate HeapDestroy InterlockedIncrement InterlockedDecrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind GetSystemTimeAsFileTime RaiseException GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA HeapFree ExitProcess HeapAlloc LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue GetProcAddress HeapReAlloc TerminateProcess GetCurrentProcess HeapSize SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType

user32

LoadBitmapA InvalidateRect BeginPaint EndPaint PostQuitMessage GetWindowRect GetClientRect SetWindowPos DefWindowProcA DestroyWindow DialogBoxParamA SendMessageA FillRect LoadStringA LoadAcceleratorsA PeekMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadIconA LoadCursorA RegisterClassExA EndDialog CreateWindowExA UpdateWindow ShowWindow

gdi32

SelectObject BitBlt DeleteDC CreateSolidBrush DeleteObject CreateCompatibleDC

shell32

ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

4e71930a812a2b5650e7e08eb2b10b34_JaffaCakes118

winmm

kernel32

user32

gdi32

shell32

generic