8822b510c7a6084e481376ed48e8e074_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8822b510c7a6084e481376ed48e8e074_JaffaCakes118
Size 4.1MB
Sample240531-yfph6aba2t
SHA256 551e815844958ea8e208775ebc5fd8e8de97d743e20fe24b63bdbda1414fc98a
MD5 8822b510c7a6084e481376ed48e8e074
SHA1 c092ff067deeadd5a1b8d9d67df959b45a6dd389
SHA512 a538e18a0cdda3f2cc37ec702a1833eae1038cb370d1538d911718e1c5a459aaf377e349670ea069295b71b72dc3bf4a0d60fe601c70554bd52e660826e6cb6d
SSDEEP 98304:p/IfWQ2qr04vMLOMzHZ/R11zg/e0cJcX2UbCS/2wmrh3yj:cWQ2s04Gj1n1zgngo2ohmW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8822b510c7a6084e481376ed48e8e074_JaffaCakes118

File Explorer

8822b510c7a6084e481376ed48e8e074_JaffaCakes118

.exe 4.1MB

8822b510c7a6084e481376ed48e8e074_JaffaCakes118

IMPHASH 428e0bcbc418627bd16bd04dc41a4d9f
SHA256 551e815844958ea8e208775ebc5fd8e8de97d743e20fe24b63bdbda1414fc98a
MD5 8822b510c7a6084e481376ed48e8e074
SHA1 c092ff067deeadd5a1b8d9d67df959b45a6dd389
SHA512 a538e18a0cdda3f2cc37ec702a1833eae1038cb370d1538d911718e1c5a459aaf377e349670ea069295b71b72dc3bf4a0d60fe601c70554bd52e660826e6cb6d
SSDEEP 98304:p/IfWQ2qr04vMLOMzHZ/R11zg/e0cJcX2UbCS/2wmrh3yj:cWQ2s04Gj1n1zgngo2ohmW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateDirectoryA CreateFileA CreateFileMappingA CreateProcessA DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FindClose FindFirstFileA FindNextFileA FreeLibrary GetCommandLineA GetExitCodeProcess GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemDirectoryA GetTempFileNameA GetTempPathA InitializeCriticalSection LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree MapViewOfFile MoveFileExA RemoveDirectoryA SetConsoleCtrlHandler SetCurrentDirectoryA SetEnvironmentVariableA SetUnhandledExceptionFilter TlsGetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WriteFile lstrcatA lstrcmpA lstrcpyA lstrlenA

msvcrt

_strdup _stricoll __getmainargs __mb_cur_max __p__environ __p__fmode __set_app_type _cexit _errno _fpreset _fullpath _iob _isctype _onexit _pctype _setmode abort atexit calloc fprintf fputc free fwrite malloc mbstowcs memcmp memcpy realloc setlocale signal strchr strcoll strlen strncpy tolower vfprintf wcstombs

Name

.text

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

708B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8822b510c7a6084e481376ed48e8e074_JaffaCakes118

kernel32

msvcrt

generic