919771294d655c8d2476b4093af41979_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
919771294d655c8d2476b4093af41979_JaffaCakes118
Size 170KB
Sample240603-ne3paadh63
SHA256 8b9420e9fb88406282a1781d304ce01926391fa860ef9386ecd44de3bca8a991
MD5 919771294d655c8d2476b4093af41979
SHA1 df9f892eee64b82d6f1d0c2b4d6ffc94313c73bf
SHA512 57cc783cf2efddda9860be1458d161727c26f023200769fc703dd83d5d2809599100e0cac415966f248e963788bfca7f6fce7f7c939400133ce0f4911053b019
SSDEEP 3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
919771294d655c8d2476b4093af41979_JaffaCakes118

File Explorer

919771294d655c8d2476b4093af41979_JaffaCakes118

.exe 170KB

919771294d655c8d2476b4093af41979_JaffaCakes118

IMPHASH 4d6634768ec87e8f2e6ce3c9ec9a57fa
SHA256 8b9420e9fb88406282a1781d304ce01926391fa860ef9386ecd44de3bca8a991
MD5 919771294d655c8d2476b4093af41979
SHA1 df9f892eee64b82d6f1d0c2b4d6ffc94313c73bf
SHA512 57cc783cf2efddda9860be1458d161727c26f023200769fc703dd83d5d2809599100e0cac415966f248e963788bfca7f6fce7f7c939400133ce0f4911053b019
SSDEEP 3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47963

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Build\desktop_apps\_out\launcher.pdb

kernel32

WriteFile ReadFile CreateDirectoryW CreateFileW GetLastError GetTickCount GetTempPathW GetTempFileNameW RemoveDirectoryW DeleteFileW GetModuleFileNameW GetFileSize LockFileEx UnlockFile GetVersionExW MultiByteToWideChar WideCharToMultiByte LocalFree SetEvent Sleep CreateEventW HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap DecodePointer RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetACP GetModuleHandleW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStringTypeW EncodePointer RtlUnwind GetStdHandle GetFileType GetModuleHandleExW WriteConsoleW GetCommandLineW GetConsoleCP GetConsoleMode GetCPInfo CreateProcessW SetUnhandledExceptionFilter SetLastError GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsProcessorFeaturePresent LCMapStringW ExitProcess IsDebuggerPresent GetCurrentThreadId OutputDebugStringW LoadLibraryExW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers SetFilePointerEx IsValidCodePage GetOEMCP SetStdHandle FreeLibrary FormatMessageA GetModuleHandleA LoadLibraryW CloseHandle WaitForSingleObject UnhandledExceptionFilter GetProcAddress LoadLibraryExA

shell32

SHGetFolderPathW

ws2_32

ntohl

advapi32

CryptDestroyKey CryptAcquireContextW CryptCreateHash CryptHashData CryptReleaseContext CryptDestroyHash CryptVerifySignatureW

ole32

CoTaskMemFree StringFromCLSID CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

919771294d655c8d2476b4093af41979_JaffaCakes118

kernel32

shell32

ws2_32

advapi32

ole32

generic