84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118
Size 287KB
Sample240530-s3flwaed79
SHA256 ce6e354ee95722848879accb6dd2e273bf3703498820852030ea2081263bf3ce
MD5 84aba2727476cb2db30a44e7cc6ecc76
SHA1 c29fdbe2d4911f1f6458b01f8f9ddf8e5199a50c
SHA512 940f0fc7abda3c2261e75cc727f2e678d217429a5448664423ed8506dbdc877f983c9e7361f47a8d5143f8408130b319c8f95486bea36c3e06c1dcd63645c8ae
SSDEEP 6144:n5NeJNQUnrdBFA7u3BncB0lpPW6I/Y9abCcpKAGJ6goqvUt4l5:2BcB0PPWl/Y9ab8AG5oqvl5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118

File Explorer

84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118

.exe 287KB

84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118

IMPHASH e4a32ce191bae90c3a42eb470c6f56a4
SHA256 ce6e354ee95722848879accb6dd2e273bf3703498820852030ea2081263bf3ce
MD5 84aba2727476cb2db30a44e7cc6ecc76
SHA1 c29fdbe2d4911f1f6458b01f8f9ddf8e5199a50c
SHA512 940f0fc7abda3c2261e75cc727f2e678d217429a5448664423ed8506dbdc877f983c9e7361f47a8d5143f8408130b319c8f95486bea36c3e06c1dcd63645c8ae
SSDEEP 6144:n5NeJNQUnrdBFA7u3BncB0lpPW6I/Y9abCcpKAGJ6goqvUt4l5:2BcB0PPWl/Y9ab8AG5oqvl5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

SetFileSecurityW

gdi32

CreateCompatibleDC CreateFontA DeleteDC DeleteObject GetObjectA GetPixel GetStockObject SelectObject SetBkColor SetBkMode SetPixel SetTextColor StretchBlt TextOutA

kernel32

CloseHandle CreateSemaphoreA DeleteCriticalSection EnterCriticalSection ExitProcess FindResourceA GetCommandLineA GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoA InitializeCriticalSection InterlockedDecrement InterlockedIncrement LeaveCriticalSection LoadResource LockResource OutputDebugStringA ReleaseSemaphore SetLastError SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualProtect VirtualQuery WaitForSingleObject _lclose _lopen _lread

msvcrt

_write __getmainargs __p__environ __p__fmode __set_app_type _cexit _iob _onexit _setmode abort atexit calloc fputc fputs free fwrite malloc memchr memcmp memcpy memmove memset realloc signal sprintf strcmp strerror strlen vfprintf

user32

CreateWindowExA DefWindowProcA DestroyWindow DispatchMessageA GetSystemMetrics LoadCursorA LoadImageA PeekMessageA PostQuitMessage RegisterClassExA ShowCursor ShowWindow TranslateMessage

ddraw

DirectDrawCreate

Name

.text

Size

119KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

392B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

84aba2727476cb2db30a44e7cc6ecc76_JaffaCakes118

advapi32

gdi32

kernel32

msvcrt

user32

ddraw

generic