89543cee712497575d6bece07fe87584_JaffaCakes118

General

Target
89543cee712497575d6bece07fe87584_JaffaCakes118
Size 429KB
Sample240601-er3qdaaa94
SHA256 c53e0f2ba4d0ff61ed41d31cb5671c96ba8a98afbf32f1e76cd88e5061c20370
MD5 89543cee712497575d6bece07fe87584
SHA1 06daf697bb24d67fabff710ad530eddd4919c3c8
SHA512 0799b91b4e63c07d76bb72e2d5cd7be8e94a1eda715ebf9b5728ab4b7bee6b02519804c957838e370e7a930862a448a03558dfb02077ccac042dcace8c3e986c
SSDEEP 6144:XuqYiSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jxc:RYnlxgeG+Q3s89CD9vZa0Qppc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89543cee712497575d6bece07fe87584_JaffaCakes118

File Explorer

89543cee712497575d6bece07fe87584_JaffaCakes118

.dll 429KB

89543cee712497575d6bece07fe87584_JaffaCakes118

IMPHASH c87f092acb31770c09fe4d5ea1264e23
SHA256 c53e0f2ba4d0ff61ed41d31cb5671c96ba8a98afbf32f1e76cd88e5061c20370
MD5 89543cee712497575d6bece07fe87584
SHA1 06daf697bb24d67fabff710ad530eddd4919c3c8
SHA512 0799b91b4e63c07d76bb72e2d5cd7be8e94a1eda715ebf9b5728ab4b7bee6b02519804c957838e370e7a930862a448a03558dfb02077ccac042dcace8c3e986c
SSDEEP 6144:XuqYiSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jxc:RYnlxgeG+Q3s89CD9vZa0Qppc
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

69840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Body\88\22\Too\24\25\Be\We\Sudden\91\Feet\Mix\Me\40\5\Bear.pdb

kernel32

VirtualAlloc VirtualFree VirtualProtect ResetEvent Sleep GetSystemDirectoryA GetCurrentDirectoryA CreateDirectoryA CopyFileA SetEndOfFile CreateFileW ReadConsoleW GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle HeapQueryInformation HeapSize HeapReAlloc HeapFree GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind InterlockedFlushSList GetLastError EncodePointer FreeLibrary LoadLibraryExW GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW GetStdHandle GetFileType WriteConsoleW ExitProcess MultiByteToWideChar WideCharToMultiByte HeapAlloc HeapValidate GetSystemInfo WriteFile OutputDebugStringA OutputDebugStringW CloseHandle WaitForSingleObjectEx CreateThread GetStringTypeW GetACP ReadFile SetFilePointerEx LCMapStringW FindClose FindFirstFileExA DecodePointer

mscms

SetStandardColorSpaceProfileA UninstallColorProfileA InstallColorProfileA SelectCMM UnregisterCMMA RegisterCMMA TranslateColors TranslateBitmapBits GetNamedProfileInfo GetStandardColorSpaceProfileA GetPS2ColorRenderingIntent GetPS2ColorSpaceArray SetColorProfileElementReference SetColorProfileElement SetColorProfileElementSize SetColorProfileHeader IsColorProfileTagPresent GetCountColorProfileElements IsColorProfileValid OpenColorProfileA GetPS2ColorRenderingDictionary

Sharing

General

Malware Config

Signatures

File Explorer

89543cee712497575d6bece07fe87584_JaffaCakes118

kernel32

mscms

generic