a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118

General

Target
a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118
Size 224KB
Sample240612-2gp3vstara
SHA256 5fc9197289e56c85dc98d5fc927006bb8b4357eebe88f109f7570ef7ed10f2ba
MD5 a2b7980501ce45b22d338c4c2b161d22
SHA1 b2443f84b5ee768e873222172623a44f319b2dc1
SHA512 2543af0d21dae559318c3179ac7fa3da56390172a5327cf64dba4f76110976d935517f863a3c581aa54094bbe41b4293c3267edf04a53bd76b52f5b424885d53
SSDEEP 3072:RM9jG0zeb+Bd7ljqaULpJKV/WxlX8sh+li7pBNi2VYCT8NbHyf+AViaO4Vb:RgzQ+D7ljXma/WxSTi7rT8xHY64Vb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118

File Explorer

a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118

.exe 224KB

a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118

IMPHASH 3b4d10a2077e379da2a72e7d88aab078
SHA256 5fc9197289e56c85dc98d5fc927006bb8b4357eebe88f109f7570ef7ed10f2ba
MD5 a2b7980501ce45b22d338c4c2b161d22
SHA1 b2443f84b5ee768e873222172623a44f319b2dc1
SHA512 2543af0d21dae559318c3179ac7fa3da56390172a5327cf64dba4f76110976d935517f863a3c581aa54094bbe41b4293c3267edf04a53bd76b52f5b424885d53
SSDEEP 3072:RM9jG0zeb+Bd7ljqaULpJKV/WxlX8sh+li7pBNi2VYCT8NbHyf+AViaO4Vb:RgzQ+D7ljXma/WxSTi7rT8xHY64Vb
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

137640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection ReleaseSemaphore EnterCriticalSection CreateSemaphoreW PostQueuedCompletionStatus CreateIoCompletionPort DeleteCriticalSection TryEnterCriticalSection SetEvent GetTickCount ResetEvent CreateEventW GetCurrentThreadId GetSystemDirectoryW LoadLibraryW LocalFree QueryPerformanceCounter GetSystemTimeAsFileTime Sleep GetProcAddress QueryPerformanceFrequency InitializeCriticalSectionAndSpinCount WaitForSingleObject GetQueuedCompletionStatus GetLastError CloseHandle HeapSize WriteConsoleW FlushFileBuffers SetEnvironmentVariableA LCMapStringW CompareStringW GetStringTypeW LoadLibraryExW OutputDebugStringW RtlUnwind FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA GetConsoleCP GetCPInfo GetOEMCP GetACP IsValidCodePage CreateFileW WideCharToMultiByte GetModuleHandleExW UnmapViewOfFile SetFilePointerEx GetFileType SetStdHandle HeapFree HeapAlloc HeapReAlloc CreateThread ExitThread ResumeThread GetCurrentProcessId ReadFile MultiByteToWideChar GetConsoleMode ReadConsoleW IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer SetConsoleCtrlHandler GetCommandLineA GetStdHandle GetStartupInfoW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW GetProcessHeap ExitProcess RaiseException

ws2_32

getnameinfo inet_addr sendto select connect htonl getaddrinfo getsockname freeaddrinfo getsockopt listen accept WSAIoctl socket recv send getpeername setsockopt bind WSAGetOverlappedResult closesocket WSASetLastError ioctlsocket WSARecv WSASend WSAGetLastError

iphlpapi

GetIpAddrTable GetBestRoute

Sharing

General

Malware Config

Signatures

File Explorer

a2b7980501ce45b22d338c4c2b161d22_JaffaCakes118

kernel32

ws2_32

iphlpapi

generic