7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118
Size 211KB
Sample240528-wp9vcaff29
SHA256 d67e1fd5d40e841c1aedbbf65d5f72a69da5ac54e48ae92da1f428c9f18d8363
MD5 7de2125eba63b36cdc4f45b008a4118b
SHA1 b1c3ec138e2f104bac76852bf0d2bb4708e67922
SHA512 cbe3a45f1afde4e695f66d6bfb98e10a3fba41c1d2ecb5eee15c3a2e7d52b6d58ef878071452dab26427607c83040a18745a7f17227bac6d74add4969ff9b2fc
SSDEEP 6144:6ZLwQyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwQyyHadIBkLIi8dTL2SvguYOO1mkN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118

File Explorer

7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118

.dll 211KB

7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118

IMPHASH d26d819c9035c795a5bbe4bce9b3d935
SHA256 d67e1fd5d40e841c1aedbbf65d5f72a69da5ac54e48ae92da1f428c9f18d8363
MD5 7de2125eba63b36cdc4f45b008a4118b
SHA1 b1c3ec138e2f104bac76852bf0d2bb4708e67922
SHA512 cbe3a45f1afde4e695f66d6bfb98e10a3fba41c1d2ecb5eee15c3a2e7d52b6d58ef878071452dab26427607c83040a18745a7f17227bac6d74add4969ff9b2fc
SSDEEP 6144:6ZLwQyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwQyyHadIBkLIi8dTL2SvguYOO1mkN
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

112356

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\52\Nor\sound\72\Next\Support\87\Equal\45\Rail\Soft\67\37\Noise.pdb

kernel32

CreateFileA TlsGetValue FindNextFileA HeapSize TlsAlloc GetCurrentDirectoryA CloseHandle FindClose SetFilePointer ReadFile GetFileSize Sleep GetEnvironmentVariableA GetModuleFileNameA MulDiv LoadLibraryA WaitForSingleObject SetEvent DeleteCriticalSection VirtualProtect GlobalFree GlobalUnlock FindFirstFileA GlobalAlloc EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError EncodePointer TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateFileW GetFileType GetStdHandle GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc HeapReAlloc GetACP GetStringTypeW SetStdHandle WriteFile GetConsoleCP GetConsoleMode SetEndOfFile ReadConsoleW SetFilePointerEx OutputDebugStringW CreateThread LCMapStringW FindFirstFileExA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers DecodePointer

comctl32

ImageList_DragMove ImageList_DragEnter ImageList_Draw ImageList_ReplaceIcon

aclui

ord2 ord1

cabinet

ord12 ord10 ord14

cryptui

CryptUIWizDigitalSign CryptUIDlgSelectCertificateFromStore CryptUIWizFreeDigitalSignContext CryptUIDlgViewCertificateA CryptUIWizExport CryptUIWizImport CryptUIDlgViewContext

Sharing

General

Malware Config

Signatures

File Explorer

7de2125eba63b36cdc4f45b008a4118b_JaffaCakes118

kernel32

comctl32

aclui

cabinet

cryptui

generic