5830cf430af8122d01cf361078a6bb93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
5830cf430af8122d01cf361078a6bb93_JaffaCakes118
Size 324KB
Sample240519-dbd7eaeh42
SHA256 05c33a3e8abc524778d307356dc4a540bdf864b307a0f2ecd4a60c72016b9cb6
MD5 5830cf430af8122d01cf361078a6bb93
SHA1 c696f0be9086fc97b757187d203519593a02ce12
SHA512 79a5dd555ec3423911acb491fb8edaed0ac595d2327570521d6c2e8f337c63192e0dcf2ff46161324c763f721a66f25113363c7fbd06aba2ddb5f4a30fdde5a2
SSDEEP 6144:lOLPO/z4Rgx/oIS7v91X/7buycO3UrYdE2DsHfC:Qi/z4R+kRNjblcOSYS2Qq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5830cf430af8122d01cf361078a6bb93_JaffaCakes118

File Explorer

5830cf430af8122d01cf361078a6bb93_JaffaCakes118

.exe 324KB

5830cf430af8122d01cf361078a6bb93_JaffaCakes118

IMPHASH efee207c9239deb60f9f430fcbf395a5
SHA256 05c33a3e8abc524778d307356dc4a540bdf864b307a0f2ecd4a60c72016b9cb6
MD5 5830cf430af8122d01cf361078a6bb93
SHA1 c696f0be9086fc97b757187d203519593a02ce12
SHA512 79a5dd555ec3423911acb491fb8edaed0ac595d2327570521d6c2e8f337c63192e0dcf2ff46161324c763f721a66f25113363c7fbd06aba2ddb5f4a30fdde5a2
SSDEEP 6144:lOLPO/z4Rgx/oIS7v91X/7buycO3UrYdE2DsHfC:Qi/z4R+kRNjblcOSYS2Qq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31833

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock GlobalAlloc GetModuleHandleA InterlockedIncrement GetPrivateProfileSectionA SetEvent CancelDeviceWakeupRequest DeleteCriticalSection LocalLock WriteFile ReadFileEx GetCurrentActCtx GetModuleFileNameA SetEndOfFile GetFileAttributesA ReleaseMutex Sleep WaitForSingleObject FindResourceExW GetConsoleTitleA SetConsoleCtrlHandler SetConsoleTitleW AttachConsole ActivateActCtx ReadConsoleW ZombifyActCtx ReleaseActCtx HeapValidate GetProcessHeaps LocalAlloc GetProcAddress CommConfigDialogA HeapAlloc HeapUnlock GetCurrentProcess lstrlenW FindActCtxSectionStringW ReadFile WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar InitializeCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo GetStringTypeW SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA CloseHandle CreateFileA GetConsoleCP GetConsoleMode FlushFileBuffers GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthFloatW

Name

.text

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

160KB

Virtual Size

73.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.beper

Size

512B

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xepobel

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wel

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.petaca

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dot

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5830cf430af8122d01cf361078a6bb93_JaffaCakes118

kernel32

gdi32

generic