8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118

General

Target
8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118
Size 1.2MB
Sample240602-199sashb5w
SHA256 23d42a3c0b26e6b97d8114d33b8049ea44b926812d957867838487a7638042d5
MD5 8fa20c5f40cb1e58a84270f21159cf93
SHA1 8292dca095bdd8c9408f59ecf3e9801537dcf46d
SHA512 b64b761bd1b33d9f7b6c5583b8e68918954e3a971dd2e27e59050cc7428506ae00377d0fe38ea881589c83fe5a785c25c5322f892145166fde38782b6b324612
SSDEEP 24576:zB8/cykaJJJJJJJJJJJJJ7JJJJJOnOnOnOn3xwwncncnJEGBAFPJi6lAPSdHWOx5:zBIqBdHpx+QgFgoYO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118

File Explorer

8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118

.exe 1.2MB

8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118

IMPHASH bb1af0a619bd1427dcc6c2d0a7f5be93
SHA256 23d42a3c0b26e6b97d8114d33b8049ea44b926812d957867838487a7638042d5
MD5 8fa20c5f40cb1e58a84270f21159cf93
SHA1 8292dca095bdd8c9408f59ecf3e9801537dcf46d
SHA512 b64b761bd1b33d9f7b6c5583b8e68918954e3a971dd2e27e59050cc7428506ae00377d0fe38ea881589c83fe5a785c25c5322f892145166fde38782b6b324612
SSDEEP 24576:zB8/cykaJJJJJJJJJJJJJ7JJJJJOnOnOnOn3xwwncncnJEGBAFPJi6lAPSdHWOx5:zBIqBdHpx+QgFgoYO
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LockResource GetProcAddress VirtualAlloc VirtualAllocEx GetLastError ReadProcessMemory WriteProcessMemory GetThreadContext SetThreadContext ResumeThread LoadResource SizeofResource GetModuleFileNameA GetModuleHandleA CreateProcessA FindResourceW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage FreeLibrary InterlockedExchange FatalAppExitA LeaveCriticalSection EnterCriticalSection EnumSystemLocalesW GetUserDefaultLCID EncodePointer DecodePointer RaiseException RtlUnwind HeapAlloc GetCommandLineW GetStdHandle WriteFile GetModuleFileNameW IsProcessorFeaturePresent HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize Sleep IsDebuggerPresent SetLastError InterlockedIncrement GetCurrentThread GetCurrentThreadId GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW CreateSemaphoreW OutputDebugStringW LoadLibraryExW LoadLibraryW SetConsoleCtrlHandler WideCharToMultiByte GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale CreateFileW

user32

LoadStringW LoadIconW LoadCursorW EndPaint BeginPaint UpdateWindow TranslateAcceleratorW LoadAcceleratorsW EndDialog DialogBoxParamW ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW

Sharing

General

Malware Config

Signatures

File Explorer

8fa20c5f40cb1e58a84270f21159cf93_JaffaCakes118

kernel32

user32

generic