812fca61d67619f15ebe1a7c3455e943_JaffaCakes118

General

Target
812fca61d67619f15ebe1a7c3455e943_JaffaCakes118
Size 112KB
Sample240529-ssshpabb62
SHA256 d4ee309b1c601084a98a9ff0bf29b3925e7020615746fa1c001b8ea74a266120
MD5 812fca61d67619f15ebe1a7c3455e943
SHA1 f60afdca8caba04ac6b46dbc918988cbe973ec53
SHA512 3cb816e9619b380ba20a4ee5efc17f2c5436cc380dedf4e0513acadabc8d4ba25800b43c7cd10ba3a780e70c85a56724ef40236578291242739bea57318ab13b
SSDEEP 1536:9q5eCd4YrxDPUjUUt1inqJqbOlb8Z6J+hMsRwdOddGdhNhV/EsDzQ2zFK:bC+YajUUt4qJqyh++fdThpEWQcg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
812fca61d67619f15ebe1a7c3455e943_JaffaCakes118

File Explorer

812fca61d67619f15ebe1a7c3455e943_JaffaCakes118

.exe 112KB

812fca61d67619f15ebe1a7c3455e943_JaffaCakes118

IMPHASH 4a7467875006881ac9a54f27b816f3ac
SHA256 d4ee309b1c601084a98a9ff0bf29b3925e7020615746fa1c001b8ea74a266120
MD5 812fca61d67619f15ebe1a7c3455e943
SHA1 f60afdca8caba04ac6b46dbc918988cbe973ec53
SHA512 3cb816e9619b380ba20a4ee5efc17f2c5436cc380dedf4e0513acadabc8d4ba25800b43c7cd10ba3a780e70c85a56724ef40236578291242739bea57318ab13b
SSDEEP 1536:9q5eCd4YrxDPUjUUt1inqJqbOlb8Z6J+hMsRwdOddGdhNhV/EsDzQ2zFK:bC+YajUUt4qJqyh++fdThpEWQcg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7187

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc LoadLibraryW GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar HeapSize GetOEMCP GetACP GetCPInfo GetProcAddress HeapAlloc GetCommandLineA HeapFree GetVersionExA GetProcessHeap GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapDestroy HeapCreate GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection Sleep RtlUnwind LoadLibraryA

user32

LoadIconA LoadCursorA RegisterClassA UpdateWindow GetMessageA TranslateMessage DispatchMessageA PostQuitMessage GetSystemMenu AppendMenuA CreateWindowExA DefWindowProcA GetDlgItemTextA SetWindowTextA FindWindowA ShowWindow DialogBoxParamA DestroyWindow SetDlgItemTextA

gdi32

GetStockObject

Sharing

General

Malware Config

Signatures

File Explorer

812fca61d67619f15ebe1a7c3455e943_JaffaCakes118

kernel32

user32

gdi32

generic