82566832567758b76147488ee97ede3c_JaffaCakes118

General

Target
82566832567758b76147488ee97ede3c_JaffaCakes118
Size 3.9MB
Sample240529-3g6laafa32
SHA256 34679b7c070df630d920d647577634bd04744ccb7dee2a2bbd5c4eda115d53ce
MD5 82566832567758b76147488ee97ede3c
SHA1 692e13785c9993e935974ca86803bfb4db7e42f6
SHA512 36f59b33ae71c50294d2e75dae1211d522e10b5b5c663a2306388b01122184940f14fa4f2b90dcdb4cf8d9513c74d3c0dfceb64f5d2b4d35aad1df840e723e01
SSDEEP 49152:kAwXaKXEVlm2vQcvMaO+7AYPhZ+4wITD6P6W3iqHiyFNl9+6wmSYziPmebwE1NWl:kAZvm2hhONShMI/6Bi6kmSzwWuX/9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82566832567758b76147488ee97ede3c_JaffaCakes118

File Explorer

82566832567758b76147488ee97ede3c_JaffaCakes118

.exe 3.9MB

82566832567758b76147488ee97ede3c_JaffaCakes118

IMPHASH a03aaa11c02c78907a5cf8ff2de450e8
SHA256 34679b7c070df630d920d647577634bd04744ccb7dee2a2bbd5c4eda115d53ce
MD5 82566832567758b76147488ee97ede3c
SHA1 692e13785c9993e935974ca86803bfb4db7e42f6
SHA512 36f59b33ae71c50294d2e75dae1211d522e10b5b5c663a2306388b01122184940f14fa4f2b90dcdb4cf8d9513c74d3c0dfceb64f5d2b4d35aad1df840e723e01
SSDEEP 49152:kAwXaKXEVlm2vQcvMaO+7AYPhZ+4wITD6P6W3iqHiyFNl9+6wmSYziPmebwE1NWl:kAZvm2hhONShMI/6Bi6kmSzwWuX/9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCompact lstrlenA AllocConsole CommConfigDialogA BuildCommDCBAndTimeoutsA UpdateResourceA SetWaitableTimer WriteTapemark SetConsoleTextAttribute ZombifyActCtx SetDefaultCommConfigW GetEnvironmentStringsW SetTapeParameters GetModuleHandleW GetTickCount GetConsoleAliasesA IsBadReadPtr GetConsoleTitleA WaitNamedPipeW WriteFile QueryActCtxW GetVolumeInformationA LoadLibraryW ReadConsoleInputA GetCalendarInfoA WriteConsoleOutputA SetConsoleCP CreateMutexW lstrcpynW GetModuleFileNameW GetTimeZoneInformation CreateActCtxA GetDevicePowerState VirtualUnlock GetStringTypeExA VerifyVersionInfoW InterlockedFlushSList GetProcAddress AttachConsole GetTapeStatus CreateConsoleScreenBuffer HeapUnlock InterlockedExchangeAdd LocalAlloc SetConsoleCtrlHandler HeapLock SetSystemTime LoadLibraryExA DeleteCriticalSection GetCPInfoExA FindAtomW lstrcpyW CopyFileExA lstrcpyA HeapReAlloc GetCommModemStatus GetFileAttributesA PulseEvent GetCommandLineA HeapSetInformation GetStartupInfoW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep RaiseException FatalAppExitA CloseHandle CreateFileA FreeLibrary InterlockedExchange GetLocaleInfoW SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapAlloc FlushFileBuffers SetEndOfFile GetProcessHeap ReadFile HeapSize CreateFileW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

gdi32

GetCharWidth32A

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

82566832567758b76147488ee97ede3c_JaffaCakes118

kernel32

gdi32

advapi32

generic