92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118

General

Target
92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118
Size 173KB
Sample240603-2wf4hach93
SHA256 7a605dd0c9e342b81c8da790d92cd85a61fc7236d1773f75e617467e0a077a3d
MD5 92e4a47a322c8bd4d86127617ace2ce1
SHA1 f6634166bcf37ff1c9eebab529e65cff94d07c46
SHA512 a15a3091a51f46e7a473f7c7b551820a0518b39a7abf84655870b6301b48f945a85dd3d6d9e4ee40c481b4d8eeee63510828697ac204120bffa3f9c20885d856
SSDEEP 3072:6jVANCPyOJB7dhjQQqcbM+ZaJwFLBJqI6zz9HT/nBNKDs:6jV4wyO/dhhqgQeBJX6zNTJYs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118

File Explorer

92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118

.exe 173KB

92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118

IMPHASH 05c9411ee87f154ffaf017cee8b5b6bb
SHA256 7a605dd0c9e342b81c8da790d92cd85a61fc7236d1773f75e617467e0a077a3d
MD5 92e4a47a322c8bd4d86127617ace2ce1
SHA1 f6634166bcf37ff1c9eebab529e65cff94d07c46
SHA512 a15a3091a51f46e7a473f7c7b551820a0518b39a7abf84655870b6301b48f945a85dd3d6d9e4ee40c481b4d8eeee63510828697ac204120bffa3f9c20885d856
SSDEEP 3072:6jVANCPyOJB7dhjQQqcbM+ZaJwFLBJqI6zz9HT/nBNKDs:6jV4wyO/dhhqgQeBJX6zNTJYs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess GetStartupInfoA GetLastError GlobalFree LocalAlloc FindNextChangeNotification AddAtomA FindFirstChangeNotificationA VirtualProtect lstrcpyA HeapReAlloc HeapSize RtlUnwind Sleep GetSystemTimeAdjustment MultiByteToWideChar LCMapStringW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter HeapCreate GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameA GetModuleFileNameW GetStdHandle WriteFile LoadLibraryW GlobalAlloc GetTickCount GetModuleHandleW GlobalMemoryStatus FindCloseChangeNotification FillConsoleOutputCharacterA GetStringTypeW ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent GetProcAddress DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc HeapFree

user32

GetAltTabInfoW GetMenuState

gdi32

SetViewportOrgEx FillPath

advapi32

ReportEventA

shell32

ExtractIconW

Sharing

General

Malware Config

Signatures

File Explorer

92e4a47a322c8bd4d86127617ace2ce1_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

generic