89515f74c1d8c23eb21ba68d9e4e819e_JaffaCakes118

General

Target
89515f74c1d8c23eb21ba68d9e4e819e_JaffaCakes118
Size 500KB
Sample240601-ephx7aaa24
SHA256 131ba2d94b368a5bcde967fd1188fa4b469dd0ffcde1e2bf94d8989e62c28a5f
MD5 89515f74c1d8c23eb21ba68d9e4e819e
SHA1 103fef070251b74736d033a9b18f7aed01b8097f
SHA512 cd0a2758eaa7d9b74d812c836d977baf9b1736c51324f0d491130a8630a7808413793a7bdcef4d7453bff7a3548bc8cfa1e37bcc8cea2cae508d5f206cac47fc
SSDEEP 6144:n5DK99xOtO8XMLOjyfdGdQK36OP9KEzmIr3JgYhCOPoKuRbdz5C241cOInPfnGfP:n5Dc3x8XPjy07n1C4uASOIP/s3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

89515f74c1d8c23eb21ba68d9e4e819e_JaffaCakes118

.exe 500KB

89515f74c1d8c23eb21ba68d9e4e819e_JaffaCakes118

IMPHASH be401e0f15879f0fec3c1119c9fcb531
SHA256 131ba2d94b368a5bcde967fd1188fa4b469dd0ffcde1e2bf94d8989e62c28a5f
MD5 89515f74c1d8c23eb21ba68d9e4e819e
SHA1 103fef070251b74736d033a9b18f7aed01b8097f
SHA512 cd0a2758eaa7d9b74d812c836d977baf9b1736c51324f0d491130a8630a7808413793a7bdcef4d7453bff7a3548bc8cfa1e37bcc8cea2cae508d5f206cac47fc
SSDEEP 6144:n5DK99xOtO8XMLOjyfdGdQK36OP9KEzmIr3JgYhCOPoKuRbdz5C241cOInPfnGfP:n5Dc3x8XPjy07n1C4uASOIP/s3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

cf:e6:83:3c:7a:31:63:0e:fc:e3:b6:80:57:74:10:04:d6:a8:5c:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Firseria,O=Firseria,L=Badalona,ST=Barcelona,C=ES,1.2.840.113549.1.9.1=#0c13737570706f727440736f6c696d62612e636f6d

Chains

Jun 24, 2014

Minor OS version

1

Major OS version

5

Entry point

61562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize WaitForSingleObject WriteFile GetLastError CloseHandle FindFirstFileW GetVersionExW GetFileAttributesW GetModuleFileNameW RemoveDirectoryW GetProcAddress SetFilePointer SystemTimeToFileTime WideCharToMultiByte ReadFile MultiByteToWideChar GetCurrentDirectoryW LocalFileTimeToFileTime SetEndOfFile CreateFileW LoadLibraryW FindNextFileW GetModuleHandleW InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCPInfo ExitProcess GetSystemTimeAsFileTime HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType HeapCreate GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetStdHandle WriteConsoleW CreateFileA GetProcessHeap

user32

wsprintfW

advapi32

RegOpenKeyExW RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

89515f74c1d8c23eb21ba68d9e4e819e_JaffaCakes118

PE Signature issue

kernel32

user32

advapi32

generic