92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118

General

Target
92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118
Size 317KB
Sample240603-sce8esbd97
SHA256 04aa7205fb128abb8c29b39c53d7015af568fc70b3615625a1b8a4c8e334bed6
MD5 92313f7fe2df2e2492a7e42a2d176f22
SHA1 26f9c5af4cff5c37f39f799fdc8c9c89938ab190
SHA512 8109540ec1e8ae71237bde30dc43d7d3f0c833ccf8af9e9a243458099dce29df6997c36aba8c9c9bf59006ed21f26891db4f4d33c6902735800aa3d5ac5c24c8
SSDEEP 6144:D3y579pvPx7iLbii5bkgVuN+xSKV7Wkrsf7Ls+1d8H5/fA0ooJ5:jy579hJOXikbkgaISKVesRLRD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118

File Explorer

92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118

.exe 317KB

92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118

IMPHASH 7a74de6a5a95d370a8151ea558121c75
SHA256 04aa7205fb128abb8c29b39c53d7015af568fc70b3615625a1b8a4c8e334bed6
MD5 92313f7fe2df2e2492a7e42a2d176f22
SHA1 26f9c5af4cff5c37f39f799fdc8c9c89938ab190
SHA512 8109540ec1e8ae71237bde30dc43d7d3f0c833ccf8af9e9a243458099dce29df6997c36aba8c9c9bf59006ed21f26891db4f4d33c6902735800aa3d5ac5c24c8
SSDEEP 6144:D3y579pvPx7iLbii5bkgVuN+xSKV7Wkrsf7Ls+1d8H5/fA0ooJ5:jy579hJOXikbkgaISKVesRLRD
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA LoadLibraryA GetProcAddress FreeLibrary GetTempPathA CreateDirectoryA WaitForSingleObject OpenProcess GetExitCodeProcess TerminateProcess GetProcessId CloseHandle FindFirstFileA RemoveDirectoryA FindClose FindNextFileA DeleteFileA FindResourceA LoadResource SizeofResource LockResource ReadFile SetEndOfFile CreateFileW OutputDebugStringW HeapReAlloc LoadLibraryExW EncodePointer DecodePointer GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent GetLastError HeapFree HeapAlloc IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId MultiByteToWideChar EnterCriticalSection LeaveCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LCMapStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers ReadConsoleW

shell32

ShellExecuteExA ord680

rpcrt4

UuidToStringA UuidCreate RpcStringFreeA

Sharing

General

Malware Config

Signatures

File Explorer

92313f7fe2df2e2492a7e42a2d176f22_JaffaCakes118

kernel32

shell32

rpcrt4

generic