a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118
Size 70KB
Sample240612-2gexwsxapm
SHA256 40fc3a9e05799c5f3a9d700588e1c25787a4ef75cd25475f2754082efd72ff8c
MD5 a2b76b49912d59e8abd0a38038a3e8df
SHA1 2a0c0634d223c5cf4c99a7e28f4a802e1543b226
SHA512 7cb2a7a3b43a448f1efc7095d9c082a5e4885612e7d87eb2dfbde6fdf536a6eb0a8e43ec0396de326b901892e75bee18159be94f154f52b1f62717fe526edfb1
SSDEEP 1536:sVIn7vLAsry2eslLS8Ti1nQyd9O3jKVfOCHoHoS:sU/9+vstGGGFO2S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118

File Explorer

a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118

.exe 70KB

a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118

IMPHASH 8023c8ca6a1bd79899800353d64fb950
SHA256 40fc3a9e05799c5f3a9d700588e1c25787a4ef75cd25475f2754082efd72ff8c
MD5 a2b76b49912d59e8abd0a38038a3e8df
SHA1 2a0c0634d223c5cf4c99a7e28f4a802e1543b226
SHA512 7cb2a7a3b43a448f1efc7095d9c082a5e4885612e7d87eb2dfbde6fdf536a6eb0a8e43ec0396de326b901892e75bee18159be94f154f52b1f62717fe526edfb1
SSDEEP 1536:sVIn7vLAsry2eslLS8Ti1nQyd9O3jKVfOCHoHoS:sU/9+vstGGGFO2S
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncmp memmove strncpy strstr _strnicmp _stricmp strlen strcmp strcpy strcat memcpy sprintf fabs ceil malloc floor free fclose tolower

kernel32

GetModuleHandleA HeapCreate SetConsoleCtrlHandler HeapDestroy ExitProcess RemoveDirectoryA GetTempFileNameA GetCommandLineA GetNativeSystemInfo FindResourceA LoadResource SizeofResource GetShortPathNameA GetWindowsDirectoryA GetSystemDirectoryA HeapAlloc HeapFree Sleep LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA WaitForSingleObject EnterCriticalSection LeaveCriticalSection TerminateProcess GetExitCodeProcess CreateFileA ReadFile WriteFile SetFilePointer DeleteFileA GetFileSize HeapReAlloc SetUnhandledExceptionFilter GetVersionExA SetLastError HeapSize TlsAlloc CreateDirectoryA GetTempPathA SetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte

user32

CharUpperA CharLowerA MessageBoxA SendMessageA PostMessageA GetWindowThreadProcessId IsWindowVisible GetWindowLongA GetForegroundWindow IsWindowEnabled EnableWindow EnumWindows SetWindowPos DestroyWindow GetDC GetWindowTextLengthA GetWindowTextA SetRect DrawTextA GetSystemMetrics ReleaseDC GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongA SetFocus RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA GetFocus GetClientRect FillRect EnumChildWindows DefFrameProcA GetWindowRect IsChild GetClassNameA GetKeyState DestroyIcon RegisterWindowMessageA

gdi32

GetStockObject SelectObject SetBkColor SetTextColor GetTextExtentPoint32A CreateSolidBrush DeleteObject GetObjectA CreateCompatibleDC GetDIBits DeleteDC GetObjectType CreateDIBSection BitBlt CreateBitmap SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA PathAddBackslashA PathUnquoteSpacesA PathRemoveArgsA PathGetArgsA PathRenameExtensionA

Sharing

General

Malware Config

Signatures

File Explorer

a2b76b49912d59e8abd0a38038a3e8df_JaffaCakes118

msvcrt

kernel32

user32

gdi32

comctl32

ole32

shell32

shlwapi

generic