95c46f5c597084196911a309bc15e878_JaffaCakes118

General

Target
95c46f5c597084196911a309bc15e878_JaffaCakes118
Size 321KB
Sample240604-wl4h6afc49
SHA256 40008cbb7c827f74cbba7dd50c5ebcc0da3a06c4d669c96b97977ddd4fb50277
MD5 95c46f5c597084196911a309bc15e878
SHA1 4d24d8fe28d22b36e31d9be822c3d2005b4c49b5
SHA512 2137dea3d9878f40be2f757665fa5681a9dd5d327c1e69a127e041a2595cbbc867e4482d0da576cd59334680edb6e1fa27f70ab06bef494320d66e4d1ee71f70
SSDEEP 6144:NfwD/eHK1rGTAOfrIV/QHxOtJkkgYsGGdzK:NfwDz1+q4Hsi+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95c46f5c597084196911a309bc15e878_JaffaCakes118

File Explorer

95c46f5c597084196911a309bc15e878_JaffaCakes118

.exe 321KB

95c46f5c597084196911a309bc15e878_JaffaCakes118

IMPHASH 9e85bc8cd0863f7512a06d6eb4c79827
SHA256 40008cbb7c827f74cbba7dd50c5ebcc0da3a06c4d669c96b97977ddd4fb50277
MD5 95c46f5c597084196911a309bc15e878
SHA1 4d24d8fe28d22b36e31d9be822c3d2005b4c49b5
SHA512 2137dea3d9878f40be2f757665fa5681a9dd5d327c1e69a127e041a2595cbbc867e4482d0da576cd59334680edb6e1fa27f70ab06bef494320d66e4d1ee71f70
SSDEEP 6144:NfwD/eHK1rGTAOfrIV/QHxOtJkkgYsGGdzK:NfwDz1+q4Hsi+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24078

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleOutputCP DeviceIoControl VirtualAlloc GetTempPathW GetLastError FileTimeToSystemTime SetFileShortNameA FindAtomA GetProcAddress CreateMailslotW GetTickCount HeapSize WriteConsoleW SetFilePointerEx LoadLibraryW GetSystemTimeAdjustment SetStdHandle WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW HeapAlloc HeapReAlloc HeapFree GetModuleFileNameA GetStdHandle WriteFile GetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW CreateFileW

user32

SetPropA GetMenuStringW

Sharing

General

Malware Config

Signatures

File Explorer

95c46f5c597084196911a309bc15e878_JaffaCakes118

kernel32

user32

generic