6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118
Size 2.0MB
Sample240524-12ebesda96
SHA256 cb7aef628c8ca7c697f875ea8667307e704cf25c0f6f486e31aa7d9110bc15df
MD5 6ff2936fb62c68c8f3fd0bb90dba587d
SHA1 ed0583aaf978ac77f22a08dea206a04d93a4ef94
SHA512 0a66059f5bf87e083806e54a05929bdca7d3ee5f6a50a4c96f9552cfc22a4599b0bf5bbf1d2c6c7c3f51b590ef9e2ef9db47b7e5404ad8bea24e190be5d2fb5a
SSDEEP 49152:BI2MGctZ+i+h2b9ErM8432ajK43Z434RpFC86o63RfPY:BIXGcii+EW4j2K52+FSo6BI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118

File Explorer

6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118

.exe 2.0MB

6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118

IMPHASH f3173778f088ce2b56b8257bfe393419
SHA256 cb7aef628c8ca7c697f875ea8667307e704cf25c0f6f486e31aa7d9110bc15df
MD5 6ff2936fb62c68c8f3fd0bb90dba587d
SHA1 ed0583aaf978ac77f22a08dea206a04d93a4ef94
SHA512 0a66059f5bf87e083806e54a05929bdca7d3ee5f6a50a4c96f9552cfc22a4599b0bf5bbf1d2c6c7c3f51b590ef9e2ef9db47b7e5404ad8bea24e190be5d2fb5a
SSDEEP 49152:BI2MGctZ+i+h2b9ErM8432ajK43Z434RpFC86o63RfPY:BIXGcii+EW4j2K52+FSo6BI
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxzip32\Release\sfxzip.pdb

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

CreateDirectoryW FindClose FindNextFileW FindFirstFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcessId GetLocaleInfoW GetNumberFormatW SetEnvironmentVariableW ExpandEnvironmentStringsW WaitForSingleObject GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile Sleep MapViewOfFile GetCommandLineW CreateFileMappingW GetTickCount OpenFileMappingW SystemTimeToFileTime TzSpecificLocalTimeToSystemTime LocalFileTimeToFileTime WideCharToMultiByte MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo GlobalAlloc SetCurrentDirectoryW WriteConsoleW DeleteFileW WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LoadLibraryA GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount QueryPerformanceCounter SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleHandleA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP HeapSize GetModuleFileNameA ExitProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue VirtualAlloc EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree MoveFileW SetFileAttributesW GetFileAttributesW FlushFileBuffers SetFileTime ReadFile GetFileType SetEndOfFile SetFilePointer GetStdHandle CloseHandle WriteFile CreateFileW SetLastError GetLastError CreateFileA GetConsoleOutputCP HeapCreate GetStartupInfoA GetCommandLineA GetSystemTimeAsFileTime HeapAlloc HeapReAlloc RaiseException RtlUnwind HeapFree

user32

EnableWindow GetDlgItem LoadBitmapW ShowWindow GetDC ReleaseDC FindWindowExW GetParent MapWindowPoints CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW DefWindowProcW DestroyWindow CopyRect IsWindow CharUpperW OemToCharBuffA LoadIconW PostMessageW GetSysColor SetForegroundWindow MessageBoxW WaitForInputIdle IsWindowVisible DialogBoxParamW DestroyIcon SetFocus GetClassNameW SendDlgItemMessageW EndDialog GetDlgItemTextW SetDlgItemTextW wvsprintfW SendMessageW PeekMessageW GetMessageW TranslateMessage DispatchMessageW LoadStringW GetWindowRect GetClientRect SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow GetWindowLongW SetWindowLongW

gdi32

GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject StretchBlt DeleteDC GetObjectW DeleteObject CreateDIBSection

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHGetFileInfoW SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW SHChangeNotify ShellExecuteExW

ole32

CreateStreamOnHGlobal CLSIDFromString CoCreateInstance OleInitialize OleUninitialize

oleaut32

VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

6ff2936fb62c68c8f3fd0bb90dba587d_JaffaCakes118

comctl32

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

generic