9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118

General

Target
9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118
Size 613KB
Sample240603-jsjfcage8z
SHA256 cdb57a075dfc0352d699e4d87c14b576818364dfd50de866d3432f11c861255e
MD5 9106953baaeea3a29fd9dbea826c73ce
SHA1 f52b0d44ab3511d9ad23c2b4a2bf21c1b73d76e6
SHA512 34c39397b06a56abb125b48d504fbb56a64e01dbaabf190b00817808a9a7a1264764c18267da6d011f39fcb031d5757bae148b9f578644802ab31702d5a3c331
SSDEEP 12288:FqnN0gGchs357VNADAxDVdbJ5qAnh2yhWH/Y28/PAlBollCr9Cq:FqN0gGchsJ/oAxDVddnE/YtAfgq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118

File Explorer

9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118

.exe 613KB

9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118

IMPHASH f91098e291a57d5b4e085e94e06654bc
SHA256 cdb57a075dfc0352d699e4d87c14b576818364dfd50de866d3432f11c861255e
MD5 9106953baaeea3a29fd9dbea826c73ce
SHA1 f52b0d44ab3511d9ad23c2b4a2bf21c1b73d76e6
SHA512 34c39397b06a56abb125b48d504fbb56a64e01dbaabf190b00817808a9a7a1264764c18267da6d011f39fcb031d5757bae148b9f578644802ab31702d5a3c331
SSDEEP 12288:FqnN0gGchs357VNADAxDVdbJ5qAnh2yhWH/Y28/PAlBollCr9Cq:FqN0gGchsJ/oAxDVddnE/YtAfgq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

33059

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbg.pdb

authz

AuthzFreeResourceManager AuthzFreeContext AuthzInitializeContextFromSid AuthzFreeAuditEvent

user32

SetCursorPos PostMessageA GetMessageW IsWindow PeekMessageA wsprintfA SetFocus IsZoomed GetWindowTextA LoadCursorA DrawIcon DispatchMessageA GetCaretPos LoadImageA IsCharLowerW

msimg32

GradientFill vSetDdrawflag AlphaBlend DllInitialize

wtsapi32

WTSUnRegisterSessionNotification WTSSetSessionInformationA WTSVirtualChannelPurgeInput WTSRegisterSessionNotification WTSEnumerateSessionsA WTSVirtualChannelOpen WTSSetUserConfigA WTSVirtualChannelRead WTSQueryUserToken WTSQuerySessionInformationA WTSSendMessageA WTSVirtualChannelWrite

kernel32

GetFullPathNameA GetLocalTime OpenMutexA VirtualQuery GetStdHandle CompareStringA GetShortPathNameA FindResourceA lstrcmpiA GetCurrentDirectoryW ResetEvent CopyFileA SetFileAttributesW FormatMessageA FileTimeToSystemTime lstrcmpA GetProcessHeap GetBinaryTypeW TlsGetValue GetModuleHandleA SetStdHandle GetLastError GetFileType CreateEventW SetCurrentDirectoryA GetProcAddress InterlockedExchange

azroles

AzCloseHandle AzGroupDelete AzFreeMemory

Sharing

General

Malware Config

Signatures

File Explorer

9106953baaeea3a29fd9dbea826c73ce_JaffaCakes118

authz

user32

msimg32

wtsapi32

kernel32

azroles

generic