60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118

General

Target
60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118
Size 811KB
Sample240520-x9jdkaea52
SHA256 c0f4a4ad9ed77c9b1e445cf008c0228e73cc54790b5e3a08fd7eb624b9250a4f
MD5 60d027c3dfb1fe6a7c8561fce0cd237a
SHA1 e07857dd6ecfd67468ff203e819be4e15643d591
SHA512 788f3337c8c46a9039408cc5feb50ec65bf29d0e87e40116069bfe827bb696945bd847f29c6aa8f25222b75a4a869f0f8a4422dda6e124e34c4483df50b7409b
SSDEEP 24576:faE0hLhnphDEnnzwci63AvpPIV6PEjDmvSmR:CnhVnEnnzw/6QvpW0EjD6R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118

File Explorer

60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118

.exe 811KB

60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118

IMPHASH ba23581d8f35f18dfa568a9bc0258560
SHA256 c0f4a4ad9ed77c9b1e445cf008c0228e73cc54790b5e3a08fd7eb624b9250a4f
MD5 60d027c3dfb1fe6a7c8561fce0cd237a
SHA1 e07857dd6ecfd67468ff203e819be4e15643d591
SHA512 788f3337c8c46a9039408cc5feb50ec65bf29d0e87e40116069bfe827bb696945bd847f29c6aa8f25222b75a4a869f0f8a4422dda6e124e34c4483df50b7409b
SSDEEP 24576:faE0hLhnphDEnnzwci63AvpPIV6PEjDmvSmR:CnhVnEnnzw/6QvpW0EjD6R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

98418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetTempPathW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress VirtualAlloc GetCurrentThreadId WaitForSingleObject CloseHandle DeleteCriticalSection GetModuleFileNameW GetTickCount GetCommandLineW CreateEventA SetEvent Sleep GetCurrentProcess DeleteFileW CreateEventW GetLastError GetFullPathNameW CopyFileW GetCurrentProcessId LoadLibraryA VirtualFree SizeofResource LoadResource FindResourceW FreeLibrary GetModuleHandleA HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

CryptExportKey CryptDuplicateHash CryptDestroyKey

comctl32

_TrackMouseEvent ImageList_ReplaceIcon ImageList_SetBkColor

Sharing

General

Malware Config

Signatures

File Explorer

60d027c3dfb1fe6a7c8561fce0cd237a_JaffaCakes118

kernel32

advapi32

comctl32

generic