532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118

General

Target
532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118
Size 116KB
Sample240518-fw7essdd64
SHA256 5a3501e64e0cb67f88c55b589716acdf256e25149b54c59a5cd599554db590c4
MD5 532bebdf7961e0e445ff76320aceb4dd
SHA1 126a43fc58db546d69ebb102ee1c1a2992672c0c
SHA512 ba8783f64d9d98af9dfe874414bd873bb5b5b4d755957346e70dfa3b4470ed5e8f6ab3864b714c27d0456ee5a64b52187f5a947702d81a0efca7deebba58aa9c
SSDEEP 3072:cChC6NAN/FuTmngEyyIVVo+mAS8n34aQSxyT9:c0CTN/gTagEyxnjDILS8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118

File Explorer

532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118

.exe 116KB

532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118

IMPHASH cce7bbce77610b9130eb5d1f4d659541
SHA256 5a3501e64e0cb67f88c55b589716acdf256e25149b54c59a5cd599554db590c4
MD5 532bebdf7961e0e445ff76320aceb4dd
SHA1 126a43fc58db546d69ebb102ee1c1a2992672c0c
SHA512 ba8783f64d9d98af9dfe874414bd873bb5b5b4d755957346e70dfa3b4470ed5e8f6ab3864b714c27d0456ee5a64b52187f5a947702d81a0efca7deebba58aa9c
SSDEEP 3072:cChC6NAN/FuTmngEyyIVVo+mAS8n34aQSxyT9:c0CTN/gTagEyxnjDILS8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadWritePtr VirtualAlloc WriteFile VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW SetUnhandledExceptionFilter FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter LCMapStringW LCMapStringA MultiByteToWideChar GetProcAddress HeapSize IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP LoadLibraryA GetStringTypeA GetStringTypeW GetLastError CompareStringA CompareStringW SetEnvironmentVariableA RaiseException SetFilePointer FlushFileBuffers CloseHandle LoadLibraryExA ReadFile GetEnvironmentStrings WideCharToMultiByte GetTimeZoneInformation GetSystemTime GetLocalTime RtlUnwind GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapReAlloc HeapAlloc TerminateProcess GetCurrentProcess SetStdHandle

user32

DefWindowProcA GetClientRect InvalidateRect DestroyWindow BeginPaint DrawTextA EndPaint PostQuitMessage CreateWindowExA LoadIconA RegisterClassExA LoadStringA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA ShowWindow GetSysColorBrush GetSysColor FillRect ReleaseCapture PtInRect LoadCursorA SetCursor UpdateWindow SetCapture CheckRadioButton SetDlgItemInt GetSystemMenu AppendMenuA SetMenuDefaultItem GetDC DrawEdge IsDlgButtonChecked ReleaseDC EndDialog DialogBoxParamA

gdi32

RealizePalette CreateHalftonePalette SelectPalette StretchDIBits BeginPath MoveToEx LineTo EndPath StrokeAndFillPath CreateBrushIndirect Ellipse CreatePen Rectangle SetROP2 CreateSolidBrush SelectObject SetBkColor DeleteObject LPtoDP GetPixel

Sharing

General

Malware Config

Signatures

File Explorer

532bebdf7961e0e445ff76320aceb4dd_JaffaCakes118

kernel32

user32

gdi32

generic