9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118

General

Target
9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118
Size 840KB
Sample240604-cf7h3she8v
SHA256 3f0e376713d3a93ff71a1f05900c171cf16b6d3f330720eff8c8f96428ef1629
MD5 9358fe3bfc895f5d7cadab4c7b6dfcaf
SHA1 0e68e505a25dee7f9a7bec7eb8789f1d0b0afad8
SHA512 0a7392120e9afdb9c116c226e2a5e79f4c9562896723a73b4cc4deaf1b1a547f7cc4a794061a3ccce65d5516665832349a4ee9967d410bc1974af452d85d000e
SSDEEP 12288:Kusneo1XtkgE/ALfsNuve0OhwyP+t7xdHe7Fv8uBg829gdqWg10EJhiia:KPTmjxqlpYv8/8C4qgEJkia
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118

File Explorer

9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118

.exe 840KB

9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118

IMPHASH 353ca9c8aebf7b43ac7cc6a0d904c41f
SHA256 3f0e376713d3a93ff71a1f05900c171cf16b6d3f330720eff8c8f96428ef1629
MD5 9358fe3bfc895f5d7cadab4c7b6dfcaf
SHA1 0e68e505a25dee7f9a7bec7eb8789f1d0b0afad8
SHA512 0a7392120e9afdb9c116c226e2a5e79f4c9562896723a73b4cc4deaf1b1a547f7cc4a794061a3ccce65d5516665832349a4ee9967d410bc1974af452d85d000e
SSDEEP 12288:Kusneo1XtkgE/ALfsNuve0OhwyP+t7xdHe7Fv8uBg829gdqWg10EJhiia:KPTmjxqlpYv8/8C4qgEJkia
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

103682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA SetCurrentDirectoryA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect LoadLibraryA GetProcAddress VirtualAlloc GetCurrentThreadId WaitForSingleObject CloseHandle GetTempPathW FreeLibrary GetCommandLineW GetTickCount CreateEventA SetEvent Sleep GetCurrentProcessId GetCurrentProcess DeleteFileW CopyFileW GetFullPathNameW GetTempPathA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA DeleteCriticalSection FindResourceW GetLastError HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

ConvertSidToStringSidW CloseEventLog AbortSystemShutdownW

comctl32

GetMUILanguage ImageList_EndDrag ImageList_Draw

Sharing

General

Malware Config

Signatures

File Explorer

9358fe3bfc895f5d7cadab4c7b6dfcaf_JaffaCakes118

kernel32

advapi32

comctl32

generic