63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118

General

Target
63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118
Size 1.8MB
Sample240521-smrzzaac3y
SHA256 9cec231a0bc58ed8e88e699db607c4e798bd6a175d13b421aefe48dfc2b280ad
MD5 63c04cce226c2d757de61c78ec9a5d3d
SHA1 6482e04a0b113ba40d2766cae065ed36a9c9f99f
SHA512 9f57dd14454120437d4e5471e5ad4a1305ff269ab4adb0ca9977699aeafddf06f587322980894a99c1af7362f81bbb55889db2ff7821682cbb9b75b0645442fd
SSDEEP 12288:c3ksEairhVHARLF7FLo5u9+dRvkmWDd15nok/UuiMdT7:/sjidCfKg+dRER1No09iMV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118

File Explorer

63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118

.exe 1.8MB

63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118

IMPHASH 02685d68055a7fbe5f95d9a4eae368db
SHA256 9cec231a0bc58ed8e88e699db607c4e798bd6a175d13b421aefe48dfc2b280ad
MD5 63c04cce226c2d757de61c78ec9a5d3d
SHA1 6482e04a0b113ba40d2766cae065ed36a9c9f99f
SHA512 9f57dd14454120437d4e5471e5ad4a1305ff269ab4adb0ca9977699aeafddf06f587322980894a99c1af7362f81bbb55889db2ff7821682cbb9b75b0645442fd
SSDEEP 12288:c3ksEairhVHARLF7FLo5u9+dRvkmWDd15nok/UuiMdT7:/sjidCfKg+dRER1No09iMV
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleWindow VirtualProtect WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetStringTypeW GetCPInfo CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree GetStdHandle WriteFile GetModuleFileNameA ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP GetProcessHeap GetFileType FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle HeapSize GetConsoleCP CreateFileW

user32

GetDC ShowWindow ReleaseDC

Name

.text

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

950KB

Virtual Size

950KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idat

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

780KB

Virtual Size

779KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

63c04cce226c2d757de61c78ec9a5d3d_JaffaCakes118

kernel32

user32

generic