8ec21130f83612b50655fa1755c68cca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8ec21130f83612b50655fa1755c68cca_JaffaCakes118
Size 320KB
Sample240602-vbk4dsgh8w
SHA256 c512b38e476dada9b7b00d34625c8d543fa927068893482d8f521cddf2aadaa6
MD5 8ec21130f83612b50655fa1755c68cca
SHA1 1f1c111e3862acbc6ad38c94441600b5e54efc80
SHA512 5ce93bdbccbedacbb7fa724cc215324691adc5c098ece56b8b82b740e29031accd86bf54ddb7ea34101e3709af0d1f1ce6a6627534c3781e17e47394a517ca6f
SSDEEP 6144:3RWyOBcbCJddzaUvV1+9LOx49dnkLp7oSROjAYEfMF2Ws92s6mWQuT:tCJb9YQ49q9oR8YSuT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec21130f83612b50655fa1755c68cca_JaffaCakes118

File Explorer

8ec21130f83612b50655fa1755c68cca_JaffaCakes118

.exe 320KB

8ec21130f83612b50655fa1755c68cca_JaffaCakes118

IMPHASH 6f4980ce3dd96fe5b5a9239a84364534
SHA256 c512b38e476dada9b7b00d34625c8d543fa927068893482d8f521cddf2aadaa6
MD5 8ec21130f83612b50655fa1755c68cca
SHA1 1f1c111e3862acbc6ad38c94441600b5e54efc80
SHA512 5ce93bdbccbedacbb7fa724cc215324691adc5c098ece56b8b82b740e29031accd86bf54ddb7ea34101e3709af0d1f1ce6a6627534c3781e17e47394a517ca6f
SSDEEP 6144:3RWyOBcbCJddzaUvV1+9LOx49dnkLp7oSROjAYEfMF2Ws92s6mWQuT:tCJb9YQ49q9oR8YSuT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

PlaySoundA

kernel32

ReadFile SetStdHandle LoadLibraryA GetOEMCP GetACP GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoW GetUserDefaultLCID CloseHandle SetFilePointer GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers IsBadCodePtr IsBadWritePtr IsBadReadPtr VirtualFree GetTickCount LoadLibraryExA GetLocaleInfoA GetLastError HeapCreate HeapDestroy InterlockedIncrement InterlockedDecrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind GetSystemTimeAsFileTime RaiseException GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA HeapFree ExitProcess HeapAlloc LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery TlsAlloc SetLastError GetCurrentThreadId TlsFree TlsSetValue TlsGetValue GetProcAddress HeapReAlloc TerminateProcess GetCurrentProcess HeapSize SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType

user32

LoadBitmapA InvalidateRect BeginPaint EndPaint PostQuitMessage GetWindowRect GetClientRect SetWindowPos DefWindowProcA DestroyWindow DialogBoxParamA SendMessageA FillRect LoadStringA LoadAcceleratorsA PeekMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadIconA LoadCursorA RegisterClassExA EndDialog CreateWindowExA UpdateWindow ShowWindow

gdi32

SelectObject BitBlt DeleteDC CreateSolidBrush DeleteObject CreateCompatibleDC

shell32

ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

8ec21130f83612b50655fa1755c68cca_JaffaCakes118

winmm

kernel32

user32

gdi32

shell32

generic