812330df531d253d960661015a2a5758_JaffaCakes118

General

Target
812330df531d253d960661015a2a5758_JaffaCakes118
Size 845KB
Sample240529-sdnwyshh8v
SHA256 f99d01fa2b670af24c854d2e9f5f06151ee12e49a26d3b82b81bd3fa5b9b3034
MD5 812330df531d253d960661015a2a5758
SHA1 1bec8f4bfe3f64fd70efaef933fbb595456f77e4
SHA512 4c92dd6ccefb0816da9ba5d49dc472003ae871cbae9a2d08fc39fe4041fada78ad43cebad9aac67087fb960fe188ff014e0298e6392b80b4de5a683f92f890ac
SSDEEP 24576:3YQ0reeL+4NnqV6rfJNPUGBit7qRd5rRVBrJXFZtGp6:3n/eydVGfQ/t7y5rRVpBtw6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
812330df531d253d960661015a2a5758_JaffaCakes118

File Explorer

812330df531d253d960661015a2a5758_JaffaCakes118

.exe 845KB

812330df531d253d960661015a2a5758_JaffaCakes118

IMPHASH 7421fcfd4923c872eb714715b7eb2208
SHA256 f99d01fa2b670af24c854d2e9f5f06151ee12e49a26d3b82b81bd3fa5b9b3034
MD5 812330df531d253d960661015a2a5758
SHA1 1bec8f4bfe3f64fd70efaef933fbb595456f77e4
SHA512 4c92dd6ccefb0816da9ba5d49dc472003ae871cbae9a2d08fc39fe4041fada78ad43cebad9aac67087fb960fe188ff014e0298e6392b80b4de5a683f92f890ac
SSDEEP 24576:3YQ0reeL+4NnqV6rfJNPUGBit7qRd5rRVBrJXFZtGp6:3n/eydVGfQ/t7y5rRVpBtw6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

92727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveDirectoryA GetTempPathA CloseHandle WriteFile CreateFileA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect LoadLibraryA GetProcAddress VirtualAlloc GetCurrentThreadId CreateDirectoryA FreeLibrary DeleteCriticalSection GetCommandLineW GetTickCount CreateEventA SetEvent Sleep GetCurrentProcessId GetCurrentProcess CopyFileW DeleteFileW GetFullPathNameW GetTempPathW SetCurrentDirectoryA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA WaitForSingleObject FindResourceW GetLastError HeapFree ReadFile GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW GetSystemTimeAsFileTime HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetFileAttributesExW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW HeapReAlloc OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW WriteConsoleW SetEndOfFile HeapSize

advapi32

CryptContextAddRef CryptGenRandom BuildTrusteeWithNameW

comctl32

ImageList_AddMasked PropertySheetW CreateStatusWindowW

Sharing

General

Malware Config

Signatures

File Explorer

812330df531d253d960661015a2a5758_JaffaCakes118

kernel32

advapi32

comctl32

generic