92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

General

Target
92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118
Size 90KB
Sample240603-2nkrqacf38
SHA256 67713ae5aac48a69c97bcb8dbc6db59518a3b7c60ce57ab48c1883bd995bf7d4
MD5 92dbe3d237c0b38a6feaece08bf7a1f6
SHA1 5eeda1c31858de743f8afa7ce6c24c8c0e816c7d
SHA512 fe5f35f485dc2a675374c2581ea8a0bb92f88ef43d225e0f53d57bed6587fd73a8554cd946af252f1557e3e8573c00c43929c31e9e32258aae2b49e538c6494d
SSDEEP 1536:YyXUR8CPCrDfDpmk5C7hWmMv1CoAuBFYDlXq6RTm:5XUta7ptgC1CCE66R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

File Explorer

92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

.exe 90KB

92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

IMPHASH 395301b22ee9f744df4d1b3eb5c7e899
SHA256 67713ae5aac48a69c97bcb8dbc6db59518a3b7c60ce57ab48c1883bd995bf7d4
MD5 92dbe3d237c0b38a6feaece08bf7a1f6
SHA1 5eeda1c31858de743f8afa7ce6c24c8c0e816c7d
SHA512 fe5f35f485dc2a675374c2581ea8a0bb92f88ef43d225e0f53d57bed6587fd73a8554cd946af252f1557e3e8573c00c43929c31e9e32258aae2b49e538c6494d
SSDEEP 1536:YyXUR8CPCrDfDpmk5C7hWmMv1CoAuBFYDlXq6RTm:5XUta7ptgC1CCE66R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock FileTimeToDosDateTime lstrlenA WritePrivateProfileStructA FindResourceExW CallNamedPipeA LoadLibraryExW ReadConsoleA InterlockedDecrement ScrollConsoleScreenBufferW GetUserDefaultLCID InterlockedCompareExchange FreeEnvironmentStringsA _lclose SetTapeParameters GetSystemTimeAsFileTime WriteFile TlsSetValue GlobalAlloc LoadLibraryW Sleep GetVersionExW DeleteVolumeMountPointW LeaveCriticalSection SetConsoleMode WriteConsoleW lstrcatA DisconnectNamedPipe ReleaseActCtx SetCurrentDirectoryA GetLastError IsDBCSLeadByteEx GetProcAddress BeginUpdateResourceW CreateNamedPipeA SetVolumeLabelW WriteProfileSectionA IsValidCodePage _hwrite GetLocalTime LoadLibraryA LocalAlloc IsSystemResumeAutomatic WaitForMultipleObjects GetPrivateProfileSectionNamesA GetOEMCP GetThreadPriority WaitCommEvent GetCommTimeouts EnumDateFormatsW OpenSemaphoreW AreFileApisANSI lstrcpyA GetModuleHandleW ExitProcess GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleA RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

92dbe3d237c0b38a6feaece08bf7a1f6_JaffaCakes118

kernel32

generic