926ffc10f9133af417bbea5863256911_JaffaCakes118

General

Target
926ffc10f9133af417bbea5863256911_JaffaCakes118
Size 1.3MB
Sample240603-txmcxacc6w
SHA256 e1762dfa969e62eb9e6a24ca44feda8ca538e107c2ceeaf6d8747bc608206dc6
MD5 926ffc10f9133af417bbea5863256911
SHA1 602cb83ba9065af0cd3847dda215c44f25d336d0
SHA512 dd7e44a49d96fe8278ded22709bbe64da62a9f0604b054285f5f7c7f07c6950a863a3309b8767f47c2bcb0bb4500c037c2fe6ffd9d0cd46261dd90c92936f4bc
SSDEEP 24576:EVBgktdHg8NpOJIPa4Rjz72cCClCC6PKTI:EVyOOABNT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
926ffc10f9133af417bbea5863256911_JaffaCakes118

File Explorer

926ffc10f9133af417bbea5863256911_JaffaCakes118

.exe 1.3MB

926ffc10f9133af417bbea5863256911_JaffaCakes118

IMPHASH b919d439d8dddd431b337377b06cad54
SHA256 e1762dfa969e62eb9e6a24ca44feda8ca538e107c2ceeaf6d8747bc608206dc6
MD5 926ffc10f9133af417bbea5863256911
SHA1 602cb83ba9065af0cd3847dda215c44f25d336d0
SHA512 dd7e44a49d96fe8278ded22709bbe64da62a9f0604b054285f5f7c7f07c6950a863a3309b8767f47c2bcb0bb4500c037c2fe6ffd9d0cd46261dd90c92936f4bc
SSDEEP 24576:EVBgktdHg8NpOJIPa4Rjz72cCClCC6PKTI:EVyOOABNT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

109450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadReadPtr VirtualFree GetModuleHandleA LoadLibraryA GetCurrentProcessId GetModuleFileNameW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId ExitProcess CreateThread WaitForSingleObject CloseHandle DeleteCriticalSection FreeLibrary VirtualAlloc GetCommandLineW CreateEventA Sleep SetEvent GetCurrentProcess CreateEventW GetLastError GetFullPathNameW CopyFileW DeleteFileW GetProcAddress HeapFree GetCommandLineA GetSystemTimeAsFileTime HeapAlloc IsProcessorFeaturePresent GetProcessHeap IsDebuggerPresent EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount RtlUnwind WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetLastError InterlockedIncrement InterlockedDecrement GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers LoadLibraryExW OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW HeapReAlloc CreateFileW HeapSize SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

926ffc10f9133af417bbea5863256911_JaffaCakes118

kernel32

generic