77e51b7fa83595cf39456c3a162a4128_JaffaCakes118

General

Target
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118
Size 167KB
Sample240527-e2kbsaga4w
SHA256 3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
MD5 77e51b7fa83595cf39456c3a162a4128
SHA1 7c73b30d51a2969cc37b069c34ecefc11bde9c67
SHA512 da0b9c71bef360edafd198d2d4f37d4d908db154f831c0f6601b949e6ef312ea01ed257c3aaed611e0fcd5ee1620a43c87540d76d344748457a55ab034d47350
SSDEEP 3072:hJ86TLV2El1n95fG4Z+QgZKPfjPL0BNjR5ZWvdEpKo0c:h+6TLbl5/fG7WfDLM+vdEDf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77e51b7fa83595cf39456c3a162a4128_JaffaCakes118

File Explorer

77e51b7fa83595cf39456c3a162a4128_JaffaCakes118

.exe 167KB

77e51b7fa83595cf39456c3a162a4128_JaffaCakes118

IMPHASH 2be373ca9cb1b326d6ac9ae1771e2f71
SHA256 3e8e4989ef8a5d1b78bd13057bdb7b479b7d5491d72ead5ce4220eba3ff4d068
MD5 77e51b7fa83595cf39456c3a162a4128
SHA1 7c73b30d51a2969cc37b069c34ecefc11bde9c67
SHA512 da0b9c71bef360edafd198d2d4f37d4d908db154f831c0f6601b949e6ef312ea01ed257c3aaed611e0fcd5ee1620a43c87540d76d344748457a55ab034d47350
SSDEEP 3072:hJ86TLV2El1n95fG4Z+QgZKPfjPL0BNjR5ZWvdEpKo0c:h+6TLbl5/fG7WfDLM+vdEDf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10924

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetDefaultCommConfigW LoadResource HeapAlloc ClearCommError GetQueuedCompletionStatus SetConsoleTextAttribute FindFirstFileExW GetTickCount ReadConsoleW GetWindowsDirectoryA GetProcessTimes WideCharToMultiByte EnumSystemCodePagesA FindNextVolumeW SetConsoleCursorPosition GetAtomNameW GetEnvironmentVariableA IsBadStringPtrW GetLastError GetProcAddress SetVolumeLabelW GetPrivateProfileStringA LoadLibraryA GetProcessWorkingSetSize LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW GetModuleFileNameA FindFirstVolumeMountPointA WTSGetActiveConsoleSessionId OpenFileMappingW ResetWriteWatch AreFileApisANSI CreateFileA CompareStringW GetVolumeNameForVolumeMountPointA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree SetFilePointer CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar VirtualAlloc HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetModuleHandleA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

GetCursorInfo

advapi32

RegQueryMultipleValuesW

Sharing

General

Malware Config

Signatures

File Explorer

77e51b7fa83595cf39456c3a162a4128_JaffaCakes118

kernel32

user32

advapi32

generic