922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118
Size 1.9MB
Sample240603-r2pygsba89
SHA256 0beeffe4154db9576482f83fc72211df5d56686612b8393e8b4b71e7f2430150
MD5 922535f3d80e2afe82a5bdda3b516c3c
SHA1 83d5c5f92d7ca75f2a2455a80a2acc88e0cf3612
SHA512 3a2a30530566ba53c1cd441e2df81710d1569e5a6e2a5502607479f75139e116380b5006d62d659075e99bf6bc331109ef39679f39a7aa188920edbefd604caa
SSDEEP 24576:JHL04UL3kBd68yNhSe0/n9TQjVStHneRen0CLed:dVULUBA0/2937d
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

File Explorer

922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

.exe 1.9MB

922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

IMPHASH 97d64529cb9baa707c7831146aa58d9a
SHA256 0beeffe4154db9576482f83fc72211df5d56686612b8393e8b4b71e7f2430150
MD5 922535f3d80e2afe82a5bdda3b516c3c
SHA1 83d5c5f92d7ca75f2a2455a80a2acc88e0cf3612
SHA512 3a2a30530566ba53c1cd441e2df81710d1569e5a6e2a5502607479f75139e116380b5006d62d659075e99bf6bc331109ef39679f39a7aa188920edbefd604caa
SSDEEP 24576:JHL04UL3kBd68yNhSe0/n9TQjVStHneRen0CLed:dVULUBA0/2937d
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winspool.drv

DeleteMonitorW

kernel32

HeapDestroy GetProcessId InitializeCriticalSection SystemTimeToFileTime TransactNamedPipe CreateEventW CreateFileMappingW VirtualAlloc GetCommandLineW FindFirstFileW WideCharToMultiByte GetUserDefaultLCID GetStringTypeW GetConsoleWindow CloseHandle GetModuleFileNameW CreateFileW WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapSize HeapReAlloc HeapAlloc OutputDebugStringW RtlUnwind LoadLibraryExW HeapFree LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetStartupInfoW DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap MultiByteToWideChar GetProcAddress GetModuleHandleExW ExitProcess DecodePointer GetCurrentThreadId SetLastError RaiseException EncodePointer GetLastError

advapi32

RegCloseKey RegQueryInfoKeyW

user32

MapDialogRect DrawIconEx CreateIcon GetShellWindow SetParent PtInRect OffsetRect IntersectRect SetRectEmpty SetRect FillRect GetSysColorBrush GetCursor SetCursorPos ValidateRect BeginPaint SetActiveWindow CreatePopupMenu GetActiveWindow CountClipboardFormats GetDlgItemTextW EndDialog DialogBoxParamW AnyPopup IsIconic GetWindowPlacement ShowOwnedPopups RegisterClassExW PostMessageW DrawEdge

opengl32

glViewport glTexParameteri glTexImage2D glStencilOp glStencilMask glReadPixels glPixelStorei glIsEnabled glGetString glGetIntegerv glGetError glFlush glEnable glDrawElements glDrawArrays glDisable glDepthMask glDepthFunc glCopyTexSubImage2D glCopyTexImage2D glColorMask glClearDepth glClearColor glClear glBlendFunc glBindTexture glDeleteTextures

mprapi

MprConfigInterfaceTransportRemove MprConfigInterfaceTransportAdd MprConfigTransportGetInfo MprConfigServerDisconnect

Name

.text

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

446KB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

724B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.e2e6d

Size

496KB

Virtual Size

496KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sh46ck

Size

512KB

Virtual Size

511KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dcee

Size

213KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.5oe9

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

922535f3d80e2afe82a5bdda3b516c3c_JaffaCakes118

winspool.drv

kernel32

advapi32

user32

opengl32

mprapi

generic