8a46f0c4be8a91b533142a112618a885_JaffaCakes118

General

Target
8a46f0c4be8a91b533142a112618a885_JaffaCakes118
Size 448KB
Sample240601-m7bktsbe95
SHA256 903c3b246b516395e8aaca0c647d496005d9d6609107f7f67a061b5390608010
MD5 8a46f0c4be8a91b533142a112618a885
SHA1 32a765a9a32ec7065087b172607e0f9a8119fc20
SHA512 54a9c56d0b18779fc6d7c54f5b01bdf8cb2d830f7b035de2817950b90c1f363f1ad0a6a46db66fc0470c0e7b5c221d35cbe69752afbfb56560caaa42f06e7e5e
SSDEEP 6144:BQ1QeQc5RzXzT6eSWDCSsMcW7QN1ZlFdaAMy+mBcv7uuHhPUStrRS:BQ1pQYRzXy1WDCQcW8fZlF7MWWuuH9a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a46f0c4be8a91b533142a112618a885_JaffaCakes118

File Explorer

8a46f0c4be8a91b533142a112618a885_JaffaCakes118

.dll 448KB

8a46f0c4be8a91b533142a112618a885_JaffaCakes118

IMPHASH c640d421dbc24d3fd865f2d45e3fc0fd
SHA256 903c3b246b516395e8aaca0c647d496005d9d6609107f7f67a061b5390608010
MD5 8a46f0c4be8a91b533142a112618a885
SHA1 32a765a9a32ec7065087b172607e0f9a8119fc20
SHA512 54a9c56d0b18779fc6d7c54f5b01bdf8cb2d830f7b035de2817950b90c1f363f1ad0a6a46db66fc0470c0e7b5c221d35cbe69752afbfb56560caaa42f06e7e5e
SSDEEP 6144:BQ1QeQc5RzXzT6eSWDCSsMcW7QN1ZlFdaAMy+mBcv7uuHhPUStrRS:BQ1pQYRzXy1WDCQcW8fZlF7MWWuuH9a
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

250029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Wide\Know\Picture\arrive\Shore\Temperature\West.pdb

kernel32

GetSystemDirectoryW VirtualProtectEx CreateSemaphoreW CreateFileW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess MultiByteToWideChar WideCharToMultiByte WriteFile OutputDebugStringW CloseHandle WaitForSingleObjectEx CreateThread HeapAlloc LCMapStringW HeapFree FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetStdHandle SetFilePointerEx DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

8a46f0c4be8a91b533142a112618a885_JaffaCakes118

kernel32

generic