7346860e64987c4e7d696330141af1bc_JaffaCakes118

General

Target
7346860e64987c4e7d696330141af1bc_JaffaCakes118
Size 845KB
Sample240525-z4e53abb73
SHA256 71bc5b58c0dd8616f3956efdcd6ceefc9382bcf87a490244bbb03db21e780926
MD5 7346860e64987c4e7d696330141af1bc
SHA1 04c6990b1c4e7698b82c7ab1ef8fd8080a066fb2
SHA512 2db75ef8f3e849278b7ecd6a004f6c45eb04212a3d2c9942abcc5c75dd25ecb0434abdb033086561cef497ca09ea289099ae3dad0ace0c3976383ed7aa0f5a51
SSDEEP 24576:Rc8AP4Z8f0HN9SCXAhkRB6mT0r6H13VXCH4iLr:Rc8AP4Zy0tPOkR7Ir6xur
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7346860e64987c4e7d696330141af1bc_JaffaCakes118

File Explorer

7346860e64987c4e7d696330141af1bc_JaffaCakes118

.exe 845KB

7346860e64987c4e7d696330141af1bc_JaffaCakes118

IMPHASH a37183d32ef2cd813f779f24978eb09a
SHA256 71bc5b58c0dd8616f3956efdcd6ceefc9382bcf87a490244bbb03db21e780926
MD5 7346860e64987c4e7d696330141af1bc
SHA1 04c6990b1c4e7698b82c7ab1ef8fd8080a066fb2
SHA512 2db75ef8f3e849278b7ecd6a004f6c45eb04212a3d2c9942abcc5c75dd25ecb0434abdb033086561cef497ca09ea289099ae3dad0ace0c3976383ed7aa0f5a51
SSDEEP 24576:Rc8AP4Z8f0HN9SCXAhkRB6mT0r6H13VXCH4iLr:Rc8AP4Zy0tPOkR7Ir6xur
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

82830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress VirtualAlloc GetCurrentThreadId CloseHandle WaitForSingleObject DeleteCriticalSection FreeLibrary GetModuleFileNameW GetTickCount Sleep SetEvent CreateEventA GetCurrentProcess CreateEventW GetFullPathNameW GetLastError CopyFileW DeleteFileW GetCurrentProcessId LoadLibraryA VirtualFree SizeofResource LoadResource GetModuleHandleA GetCommandLineW FindResourceW HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

ConvertSidToStringSidA CopySid CryptGetDefaultProviderW

comctl32

InitCommonControlsEx _TrackMouseEvent ImageList_DragLeave

Sharing

General

Malware Config

Signatures

File Explorer

7346860e64987c4e7d696330141af1bc_JaffaCakes118

kernel32

advapi32

comctl32

generic