74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118

General

Target
74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118
Size 780KB
Sample240526-c2vfmsce67
SHA256 5ed1918a1897ec2c8d6cff0426a47d4b6d8e65d944d6adfdec755fa58688d4fd
MD5 74123a001e2a4ccf553ff792d241f7ab
SHA1 a57c28ec438404a87b29aea6617a47568e063091
SHA512 146e861b7f68cefa774a25a009be84d185e56f89f73cf1710f2fdd762db2d880cc59f6659cb8a3805ab14892334e66cf5de55dd1af5b52ea5cd04effb788f2f4
SSDEEP 24576:qhiDoNJQWSSol0k8zh6HIeSDoLLheUgrQYq54/0J4CxvARL4k:eiDPWSSXkqOXS8LFBIQYX/0J4ChC4k
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118

File Explorer

74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118

.exe 780KB

74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118

IMPHASH e3f19214bdd4994b1bf1d75996245388
SHA256 5ed1918a1897ec2c8d6cff0426a47d4b6d8e65d944d6adfdec755fa58688d4fd
MD5 74123a001e2a4ccf553ff792d241f7ab
SHA1 a57c28ec438404a87b29aea6617a47568e063091
SHA512 146e861b7f68cefa774a25a009be84d185e56f89f73cf1710f2fdd762db2d880cc59f6659cb8a3805ab14892334e66cf5de55dd1af5b52ea5cd04effb788f2f4
SSDEEP 24576:qhiDoNJQWSSol0k8zh6HIeSDoLLheUgrQYq54/0J4CxvARL4k:eiDPWSSXkqOXS8LFBIQYX/0J4ChC4k
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

88334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree InterlockedCompareExchange GetProcessHeap Sleep EnterCriticalSection LoadLibraryA GetModuleHandleA CloseHandle InterlockedIncrement InterlockedDecrement GetModuleHandleExW VirtualFree IsBadReadPtr GetLastError GetProcAddress GetFullPathNameW GetFileAttributesExW WriteFile HeapAlloc DeleteFileA ExitProcess MoveFileExA CreateProcessW SetUnhandledExceptionFilter SystemTimeToFileTime WaitForSingleObject GetTickCount TerminateProcess GetTempFileNameA GetLocalTime GetProcessId AddVectoredExceptionHandler GetTempPathA GetThreadContext GetCurrentThread WideCharToMultiByte GetFileAttributesA MultiByteToWideChar CreateDirectoryA RemoveDirectoryA GetCurrentProcessId CreateFileW FreeLibrary UnmapViewOfFile SetLastError GetFileSize WriteConsoleW VirtualQuery LeaveCriticalSection DeleteCriticalSection GetCommandLineA RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW IsDebuggerPresent IsProcessorFeaturePresent HeapSize GetStdHandle GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetConsoleMode SetFilePointerEx GetFileType GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP LoadLibraryExW HeapReAlloc OutputDebugStringW LoadLibraryW LCMapStringW GetStringTypeW SetStdHandle FlushFileBuffers

user32

MessageBoxA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

74123a001e2a4ccf553ff792d241f7ab_JaffaCakes118

kernel32

user32

advapi32

shell32

generic