64988626987ead87c1201ea5b6190acb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
64988626987ead87c1201ea5b6190acb_JaffaCakes118
Size 217KB
Sample240521-yvb7daha3w
SHA256 74fd0f4cea9f4a58e00c437103f174849c230f12a8a15eb02f44f2070449fb91
MD5 64988626987ead87c1201ea5b6190acb
SHA1 bf73ac6e6f25f08b23ebd3f9dbd3caa0e69a098b
SHA512 216fea83e0c6c44b53eb31c0302bd784f47a2f7b9f2482796789a0844c660fac93076cdf60f5236d4be175c6e19b61e844facd0bdb92e61d524e3c33b73e85e7
SSDEEP 3072:ghwzKIBjNtuBNjTFgEnf2qcmWsnvspn8XldWpz60icVgN8JSJ68UPslHh:qFIpNtuBRj2qMW0olYpz6zugNS8Esn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64988626987ead87c1201ea5b6190acb_JaffaCakes118

File Explorer

64988626987ead87c1201ea5b6190acb_JaffaCakes118

.exe 217KB

64988626987ead87c1201ea5b6190acb_JaffaCakes118

IMPHASH e611e180da81f1ba2eb28c3e32a93ad3
SHA256 74fd0f4cea9f4a58e00c437103f174849c230f12a8a15eb02f44f2070449fb91
MD5 64988626987ead87c1201ea5b6190acb
SHA1 bf73ac6e6f25f08b23ebd3f9dbd3caa0e69a098b
SHA512 216fea83e0c6c44b53eb31c0302bd784f47a2f7b9f2482796789a0844c660fac93076cdf60f5236d4be175c6e19b61e844facd0bdb92e61d524e3c33b73e85e7
SSDEEP 3072:ghwzKIBjNtuBNjTFgEnf2qcmWsnvspn8XldWpz60icVgN8JSJ68UPslHh:qFIpNtuBRj2qMW0olYpz6zugNS8Esn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

CryptAcquireContextA RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityW

kernel32

CloseHandle CreateFileA CreateThread DeleteFileA ExitProcess FreeLibrary GetACP GetCPInfo GetCommandLineA GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetUserDefaultLangID GetVersion GetVersionExA GlobalMemoryStatus HeapAlloc HeapFree LoadLibraryA MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetFilePointer SetHandleCount TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree WideCharToMultiByte WriteFile

comctl32

ord17

comdlg32

GetSaveFileNameA

gdi32

CreateFontIndirectA DeleteObject GetObjectA SelectObject SetTextColor

shell32

DragFinish DragQueryFileA SHBrowseForFolderA SHGetMalloc ShellExecuteA SHGetPathFromIDListA

user32

CheckDlgButton CreateDialogParamA DestroyWindow DialogBoxParamA DrawTextA EnableMenuItem EndDialog EnumThreadWindows GetDlgItem GetDlgItemTextA GetParent GetWindowRect IsDlgButtonChecked LoadStringA MessageBoxA ScreenToClient SendMessageA SetDlgItemTextA SetWindowPos SetWindowTextA ShowWindow UpdateWindow wsprintfA GetSystemMenu

ole32

CoInitialize CoUninitialize

Name

.text

Size

78KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

128KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

64988626987ead87c1201ea5b6190acb_JaffaCakes118

advapi32

kernel32

comctl32

comdlg32

gdi32

shell32

user32

ole32

generic