92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118

General

Target
92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118
Size 902KB
Sample240603-2sc8faca2s
SHA256 b5a89b46a5f0acdce50d07bd85a307091c1b3c5bdeb9c39f6f388a259234d920
MD5 92e0c3b3febfef64a1a41824dda328ca
SHA1 ff8818aa1e1196aa3e10f763bbcc4a9c8ed7e96c
SHA512 e26ee1694b84533f415ac6aec59c66b245062b4910e1bd3da0ab21c388c29ec1f57cadeeadbb9d45c15093d919e818a1c1e9ca15de619198819141ba889b6377
SSDEEP 24576:rPSvI8SNSAAhCUEDA2xvMZj5Z/0ePFUZ5f3pMXYTaAg9xPLl:DSCjNUEoB//zPFUZ5f3pMXYTaNVh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118

File Explorer

92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118

.exe 902KB

92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118

IMPHASH febaa31f4158ebfb66062450aeff4c57
SHA256 b5a89b46a5f0acdce50d07bd85a307091c1b3c5bdeb9c39f6f388a259234d920
MD5 92e0c3b3febfef64a1a41824dda328ca
SHA1 ff8818aa1e1196aa3e10f763bbcc4a9c8ed7e96c
SHA512 e26ee1694b84533f415ac6aec59c66b245062b4910e1bd3da0ab21c388c29ec1f57cadeeadbb9d45c15093d919e818a1c1e9ca15de619198819141ba889b6377
SSDEEP 24576:rPSvI8SNSAAhCUEDA2xvMZj5Z/0ePFUZ5f3pMXYTaAg9xPLl:DSCjNUEoB//zPFUZ5f3pMXYTaNVh
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\Documents\Visual Studio 2013\Projects\Project1\x64\Release\Project1.pdb

kernel32

LoadLibraryA LockResource FindNextFileA GetModuleHandleA GetCurrentDirectoryA GetUserDefaultUILanguage GetVersionExA CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize FindClose LCMapStringW HeapReAlloc OutputDebugStringW LoadLibraryExW GetStringTypeW HeapFree LeaveCriticalSection EnterCriticalSection RtlUnwindEx FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualAlloc FindFirstFileA GetProcAddress EnumResourceLanguagesA SizeofResource GetUserDefaultLangID LoadResource FreeLibrary GetLocaleInfoA FindResourceA ExitProcess HeapAlloc IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA EncodePointer DecodePointer IsValidCodePage GetACP GetOEMCP GetCPInfo GetLastError SetLastError GetCurrentThreadId GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetFileType DeleteCriticalSection GetModuleFileNameA CreateFileW

user32

EndPaint DestroyWindow GetMessageA RegisterClassExA PostQuitMessage DrawTextA LoadStringA GetParent LoadMenuA LoadIconA GetClientRect SendMessageA BeginPaint TranslateMessage GetMenu InvalidateRect CreateWindowExA TranslateAcceleratorA GetDlgItem EndDialog DefWindowProcA LoadAcceleratorsA ShowWindow SetMenu DrawMenuBar DispatchMessageA UpdateWindow DestroyMenu LoadCursorA DialogBoxParamA

gdi32

SelectObject CreateFontIndirectA

advapi32

CryptDestroyKey CryptEncrypt CryptImportKey RegOpenKeyExA CryptAcquireContextA CryptReleaseContext RegQueryValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

92e0c3b3febfef64a1a41824dda328ca_JaffaCakes118

kernel32

user32

gdi32

advapi32

generic