8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118

General

Target
8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118
Size 303KB
Sample240601-223vfsaf77
SHA256 d667c90b6c0132f2a2a866ef446d7a3b18e58fd344aa0f682dedd0f6d7d7401f
MD5 8c18c1c59f705c9f2cfbdf8d4e75c22e
SHA1 02504303f03a0e822814114df4d476e9b03a6d64
SHA512 5a54697ee515544dc461b02a1df10f01c2711dbbc647ba3e9d10b2db264a2fe7c63b2214a4cdcf971ad87cfbc4bedfe1ff220e7c057e10750d106404b730b8a7
SSDEEP 3072:sNzPwNwAtJKqgYLdcF7pGG7MjzQP6xswlVQN2Lxu2ntX8NUX7uFLuloc:sJPwNwAt/T2F7wcN8U2tM6iV8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118

File Explorer

8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118

.exe 303KB

8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118

IMPHASH 81f57b81eb6db8b252da01e9143dfb75
SHA256 d667c90b6c0132f2a2a866ef446d7a3b18e58fd344aa0f682dedd0f6d7d7401f
MD5 8c18c1c59f705c9f2cfbdf8d4e75c22e
SHA1 02504303f03a0e822814114df4d476e9b03a6d64
SHA512 5a54697ee515544dc461b02a1df10f01c2711dbbc647ba3e9d10b2db264a2fe7c63b2214a4cdcf971ad87cfbc4bedfe1ff220e7c057e10750d106404b730b8a7
SSDEEP 3072:sNzPwNwAtJKqgYLdcF7pGG7MjzQP6xswlVQN2Lxu2ntX8NUX7uFLuloc:sJPwNwAt/T2F7wcN8U2tM6iV8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

10988

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapReAlloc WriteConsoleW OutputDebugStringW GetCPInfo GetOEMCP GetACP IsValidCodePage LoadLibraryExW FreeLibrary SetConsoleCtrlHandler FatalAppExitA LeaveCriticalSection EnterCriticalSection CreateSemaphoreW GetModuleHandleW GetTickCount TlsFree TlsSetValue CloseHandle LoadLibraryA GetProcAddress VirtualAlloc HeapSize GetLocalTime HeapAlloc RtlUnwind GetCommandLineA GetLastError HeapFree IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer RaiseException ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap SetLastError GetCurrentThread GetCurrentThreadId GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue CreateFileW

user32

LoadIconA LoadCursorA MessageBoxA EndPaint BeginPaint UpdateWindow TranslateAcceleratorA LoadAcceleratorsA ShowWindow RegisterClassExA PostQuitMessage DispatchMessageA TranslateMessage GetMessageA LoadStringA LoadBitmapA GetDesktopWindow SetWindowLongA GetWindowLongA GetCursorPos GetWindowRect ReleaseDC GetDC TrackPopupMenu GetSubMenu CheckMenuItem LoadMenuA KillTimer SetTimer SetWindowPos DestroyWindow CreateWindowExA DefWindowProcA

gdi32

SelectObject DeleteObject DeleteDC CreateCompatibleDC BitBlt StretchBlt

Sharing

General

Malware Config

Signatures

File Explorer

8c18c1c59f705c9f2cfbdf8d4e75c22e_JaffaCakes118

kernel32

user32

gdi32

generic