8266a576fa102100a74e7110da71d34f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8266a576fa102100a74e7110da71d34f_JaffaCakes118
Size 333KB
Sample240529-3vp6fsfe86
SHA256 03bbd70591730fdea53ee221cf0b4e6608062c266e5c5c745208c73edb9f755c
MD5 8266a576fa102100a74e7110da71d34f
SHA1 6ee513ae196a1587b6d67423b82381740980b10b
SHA512 fc5ea4fc5bde6d4b2f06f399f6dcca0e4f76ca9dc6be969f57fde1ca42124ca7eb4a6f217bd82ca05897c20df85ffc6976f2b80aed9a8666075b5a24370c800b
SSDEEP 1536:JANzdE72Mgaz7FYOLd8TgPwHKVkLyCtWuPYVO2AEHVLI89CLu/:eN5R4dipqyL01AEHVLN9C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8266a576fa102100a74e7110da71d34f_JaffaCakes118

File Explorer

8266a576fa102100a74e7110da71d34f_JaffaCakes118

.exe 333KB

8266a576fa102100a74e7110da71d34f_JaffaCakes118

IMPHASH e8f2a4d7cffb9e5f02164e0c34cf48db
SHA256 03bbd70591730fdea53ee221cf0b4e6608062c266e5c5c745208c73edb9f755c
MD5 8266a576fa102100a74e7110da71d34f
SHA1 6ee513ae196a1587b6d67423b82381740980b10b
SHA512 fc5ea4fc5bde6d4b2f06f399f6dcca0e4f76ca9dc6be969f57fde1ca42124ca7eb4a6f217bd82ca05897c20df85ffc6976f2b80aed9a8666075b5a24370c800b
SSDEEP 1536:JANzdE72Mgaz7FYOLd8TgPwHKVkLyCtWuPYVO2AEHVLI89CLu/:eN5R4dipqyL01AEHVLN9C
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4111

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DFM1gCeg

opengl32

glTexCoord2f

shlwapi

PathRemoveArgsW PathRenameExtensionA PathIsRelativeA UrlIsW PathAddBackslashA PathCanonicalizeW SHGetInverseCMAP

esent

JetCommitTransaction

clusapi

ClusterRegCreateKey ClusterRegSetValue

wininet

FtpOpenFileA

cfgmgr32

CM_Get_Resource_Conflict_DetailsW

setupapi

SetupDiInstallClassW SetupGetTargetPathW SetupDiGetINFClassW SetupDiSetDeviceRegistryPropertyA SetupDiBuildDriverInfoList SetupDiGetClassInstallParamsA SetupOpenMasterInf

oleaut32

VariantCopyInd LHashValOfNameSys BSTR_UserSize VariantTimeToSystemTime

imm32

ImmConfigureIMEW

mprapi

MprAdminInterfaceSetInfo MprAdminInterfaceDisconnect

rpcrt4

RpcMgmtWaitServerListen UuidToStringA NdrClientInitializeNew NdrOleAllocate

ole32

WriteClassStm HBITMAP_UserUnmarshal CoUnmarshalInterface CoDisconnectObject StringFromCLSID CoMarshalHresult

msvcrt

wcstod iswpunct fgetws fputws

wintrust

WTHelperProvDataFromStateData

comctl32

ImageList_Create

winmm

waveOutGetID mmioAscend SendDriverMessage timeBeginPeriod

gdi32

CreateDIBSection GetKerningPairsW CopyEnhMetaFileW DeleteDC EnumFontFamiliesW LineTo GetTextFaceA SetColorAdjustment GetLayout CreateRectRgnIndirect CreateFontIndirectA CreateEnhMetaFileA SetAbortProc

secur32

AcquireCredentialsHandleW

kernel32

GetSystemDefaultLangID WinExec WaitForDebugEvent SetEndOfFile SetTimeZoneInformation Process32First SetCalendarInfoW GetStartupInfoW FlushFileBuffers FindActCtxSectionStringW SetVolumeLabelA GetBinaryTypeA GetModuleFileNameA FlsFree

crypt32

CertFindSubjectInSortedCTL CertCreateCertificateChainEngine CertGetEnhancedKeyUsage CertSaveStore

shell32

SHSetLocalizedName

urlmon

IsAsyncMoniker CoInternetIsFeatureEnabled

winspool.drv

GetPrinterDriverW

pdh

PdhEnumObjectItemsHW

user32

GetMessageExtraInfo GetMessagePos GetDialogBaseUnits GetInputState GetWindowContextHelpId MoveWindow wsprintfA CloseWindowStation EnumWindowStationsA GetClipCursor GetScrollRange PeekMessageW EnumPropsA BroadcastSystemMessageA CreateMenu AnyPopup GetMonitorInfoA

advapi32

QueryServiceConfigW RegEnumKeyW NotifyBootConfigStatus RegCloseKey CryptReleaseContext LookupPrivilegeDisplayNameA OpenSCManagerW

netapi32

NetShareEnumSticky NetServerGetInfo

lz32

LZSeek LZOpenFileW

Sharing

General

Malware Config

Signatures

File Explorer

8266a576fa102100a74e7110da71d34f_JaffaCakes118

opengl32

shlwapi

esent

clusapi

wininet

cfgmgr32

setupapi

oleaut32

imm32

mprapi

rpcrt4

ole32

msvcrt

wintrust

comctl32

winmm

gdi32

secur32

kernel32

crypt32

shell32

urlmon

winspool.drv

pdh

user32

advapi32

netapi32

lz32

generic