93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118
Size 145KB
Sample240604-hnc74ahb76
SHA256 32cae7086f53f3a614f0dd95f77042f5b75a7e6ac2ea810a1ceea5333cddebc9
MD5 93ed19f20ec9e56522c47d7ace8d062f
SHA1 a538ecfe63a6c121fc8b988502192f9600b9fb3d
SHA512 f56d53e6ec321bc3534e374dc2007255e223f02d00d3f1996016b3021834be292d74d42d5ed3763b56485f5caab46fbc2eecea53b35bf5774ee67e285b09d444
SSDEEP 3072:d4wOi31tMsKSvJwjTPsjuHwLjSFycOhV5iRvgYfWXGyNkPfr/N2:4UYsKSvGHsJuNOh/ippw7kPD/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118

File Explorer

93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118

.exe 145KB

93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118

IMPHASH fb07d04bdc5b2c60e496d1ee84f41509
SHA256 32cae7086f53f3a614f0dd95f77042f5b75a7e6ac2ea810a1ceea5333cddebc9
MD5 93ed19f20ec9e56522c47d7ace8d062f
SHA1 a538ecfe63a6c121fc8b988502192f9600b9fb3d
SHA512 f56d53e6ec321bc3534e374dc2007255e223f02d00d3f1996016b3021834be292d74d42d5ed3763b56485f5caab46fbc2eecea53b35bf5774ee67e285b09d444
SSDEEP 3072:d4wOi31tMsKSvJwjTPsjuHwLjSFycOhV5iRvgYfWXGyNkPfr/N2:4UYsKSvGHsJuNOh/ippw7kPD/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

75842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

A:\WindowsProcessManager-master\WindowsProcessManager-master\Release\TaskMgr.pdb

kernel32

Process32NextW Process32FirstW CreateToolhelp32Snapshot VirtualAlloc GetCurrentProcessId GetCurrentThreadId GetTickCount CreateProcessW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange GetSystemTimeAsFileTime TerminateProcess OpenProcess QueryFullProcessImageNameW CloseHandle GetCurrentProcess GetLastError FormatMessageW QueryPerformanceCounter ExitProcess

user32

SendMessageW DefWindowProcW CreateWindowExW wsprintfW GetMessageW UpdateWindow SetTimer RegisterClassExW LoadCursorW LoadIconW TranslateMessage DispatchMessageW PostQuitMessage ShowWindow MessageBoxW SetWindowTextW GetWindowTextW

advapi32

OpenProcessToken AdjustTokenPrivileges LookupAccountSidW GetTokenInformation GetUserNameW LookupPrivilegeValueW

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

comctl32

InitCommonControlsEx

psapi

GetProcessMemoryInfo

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

msvcr90

_invoke_watson _controlfp_s _lock _except_handler4_common _crt_debugger_hook ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode _adjust_fdiv wcschr ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ __setusermatherr ??3@YAXPAX@Z ??0exception@std@@QAE@XZ __CxxFrameHandler3 wprintf ??_V@YAXPAX@Z wcsncpy _wcsdup memset malloc _invalid_parameter_noinfo _CxxThrowException ??0exception@std@@QAE@ABV01@@Z ??2@YAPAXI@Z _unlock __dllonexit _encode_pointer ??1exception@std@@UAE@XZ _onexit _decode_pointer _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

93ed19f20ec9e56522c47d7ace8d062f_JaffaCakes118

kernel32

user32

advapi32

msvcp90

comctl32

psapi

version

msvcr90

generic