7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118

General

Target
7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118
Size 850KB
Sample240525-1mk6escb29
SHA256 93436226fe7fda590b19dbb243f2f4f3f5166eedb1263bc70d2bd7baa95675f7
MD5 7358bb9a04d5b87d57b63e1ac90eedb9
SHA1 4bba641ee7b54caf0df9bfc080f47127584ea717
SHA512 2c95b0eb7726690f93212f9bffaa99b97a0d12c5416729980a504788c412a95b69d908a602b607320cb420e597530191444fdd4c5075f69024362961cb403aec
SSDEEP 24576:3v3fjliU0CS5SjYed2qfuYWQb+ADE9gDriW0vtcz5zL1gB0D:fRiPGtF7tDrb8topq+D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118

File Explorer

7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118

.exe 850KB

7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118

IMPHASH c837e13e910bec40015c2af2d56d4289
SHA256 93436226fe7fda590b19dbb243f2f4f3f5166eedb1263bc70d2bd7baa95675f7
MD5 7358bb9a04d5b87d57b63e1ac90eedb9
SHA1 4bba641ee7b54caf0df9bfc080f47127584ea717
SHA512 2c95b0eb7726690f93212f9bffaa99b97a0d12c5416729980a504788c412a95b69d908a602b607320cb420e597530191444fdd4c5075f69024362961cb403aec
SSDEEP 24576:3v3fjliU0CS5SjYed2qfuYWQb+ADE9gDriW0vtcz5zL1gB0D:fRiPGtF7tDrb8topq+D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

97120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress LoadLibraryA VirtualAlloc GetCurrentThreadId CloseHandle GetTempPathW FreeLibrary DeleteCriticalSection GetCommandLineW GetTickCount CreateEventA Sleep SetEvent GetCurrentProcessId GetCurrentProcess DeleteFileW GetFullPathNameW CopyFileW GetTempPathA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA WaitForSingleObject FindResourceW GetLastError HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

BuildSecurityDescriptorW BuildTrusteeWithNameA AreAllAccessesGranted

comctl32

CreateToolbarEx ImageList_SetDragCursorImage ImageList_DragEnter

Sharing

General

Malware Config

Signatures

File Explorer

7358bb9a04d5b87d57b63e1ac90eedb9_JaffaCakes118

kernel32

advapi32

comctl32

generic