8faa8816ced5239e2bd7557f3db40679_JaffaCakes118

General

Target
8faa8816ced5239e2bd7557f3db40679_JaffaCakes118
Size 394KB
Sample240602-2gexwshd8z
SHA256 068a4d05ae7a9a11711c0fa0e83fd85100e4a5f979549cc2b577f1e3d2cdbd4b
MD5 8faa8816ced5239e2bd7557f3db40679
SHA1 a3ba8086d4a9d3f04ed0b21d3ccc9ab273d9c5f2
SHA512 dcdef9c11c98670dcae1e518a0f934cfb878fda737de437bd19ad86f1f8c611e3b12526e772b5f998ec7589b23547c1c01deb5b3716a8ceddb66f0a6a0e3b095
SSDEEP 6144:2N/iYKwzUEFT5wvKOXQfIzw/DxLMwty1Pa:8fpmgfIzKDxL5tYPa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8faa8816ced5239e2bd7557f3db40679_JaffaCakes118

File Explorer

8faa8816ced5239e2bd7557f3db40679_JaffaCakes118

.exe 394KB

8faa8816ced5239e2bd7557f3db40679_JaffaCakes118

IMPHASH 36d080521deb73e35bc6975767a15a1b
SHA256 068a4d05ae7a9a11711c0fa0e83fd85100e4a5f979549cc2b577f1e3d2cdbd4b
MD5 8faa8816ced5239e2bd7557f3db40679
SHA1 a3ba8086d4a9d3f04ed0b21d3ccc9ab273d9c5f2
SHA512 dcdef9c11c98670dcae1e518a0f934cfb878fda737de437bd19ad86f1f8c611e3b12526e772b5f998ec7589b23547c1c01deb5b3716a8ceddb66f0a6a0e3b095
SSDEEP 6144:2N/iYKwzUEFT5wvKOXQfIzw/DxLMwty1Pa:8fpmgfIzKDxL5tYPa
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

87985

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW GetFileSize ReadFile GetCommandLineW GetTempPathW lstrcpyW WaitForSingleObject GetExitCodeProcess ExitProcess CloseHandle GetTempFileNameW lstrlenW GetModuleFileNameW SetEndOfFile SetStdHandle WriteConsoleW HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW GetSystemTimeAsFileTime GetLastError FreeLibrary GetProcAddress lstrcatW LoadLibraryW InterlockedIncrement InterlockedDecrement WideCharToMultiByte InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc GetCPInfo LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapSize GetModuleHandleW GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType WriteFile GetConsoleCP GetConsoleMode SetFilePointer FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetProcessHeap

user32

MessageBoxW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW GetUserNameW

Sharing

General

Malware Config

Signatures

File Explorer

8faa8816ced5239e2bd7557f3db40679_JaffaCakes118

kernel32

user32

advapi32

generic