a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118

General

Target
a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118
Size 64KB
Sample240612-3kd1fayfkr
SHA256 984e6ce4cc84a67605bd668bced2628008969375883f8c20e80d4c89d4c8e2b1
MD5 a2f360ebaa0de5f41a0885cc12782e26
SHA1 43b682691def59f038e32319cc61864ff269f10b
SHA512 e3dd35cf2221565c5720b3cf78f197b0579355ec9937fc7f8b85c1dc9caf903384a001c4765151e22c8aa27fd856111b89c055c996ed3606c5cd1b36c7a6680e
SSDEEP 768:37GlUfMbyGAFGDbyBk9+YW7uDPyPN3xeVfNFIPcAxvOTtp8eRthB2ei:3qUjmmBaBPs3xeVN+PcAxkt1jUei
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118

File Explorer

a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118

.exe 64KB

a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118

IMPHASH e8a0822e43d31d9dfa87b4dc1b015676
SHA256 984e6ce4cc84a67605bd668bced2628008969375883f8c20e80d4c89d4c8e2b1
MD5 a2f360ebaa0de5f41a0885cc12782e26
SHA1 43b682691def59f038e32319cc61864ff269f10b
SHA512 e3dd35cf2221565c5720b3cf78f197b0579355ec9937fc7f8b85c1dc9caf903384a001c4765151e22c8aa27fd856111b89c055c996ed3606c5cd1b36c7a6680e
SSDEEP 768:37GlUfMbyGAFGDbyBk9+YW7uDPyPN3xeVfNFIPcAxvOTtp8eRthB2ei:3qUjmmBaBPs3xeVN+PcAxkt1jUei
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6319

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SizeofResource CreateFileW OpenMutexW GetLastError FindClose LockResource FileTimeToLocalFileTime Sleep FreeResource GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar HeapSize GetOEMCP GetACP GetCPInfo GetSystemDirectoryW WriteFile GetModuleHandleW LoadResource FindResourceW FindFirstFileW CreateMutexW FileTimeToDosDateTime WriteProcessMemory GetCurrentProcessId CloseHandle Module32NextW CreateToolhelp32Snapshot GetModuleHandleA Process32NextW Module32FirstW Process32FirstW VirtualAllocEx GetProcAddress GetCurrentProcess OpenProcess CreateRemoteThread HeapFree HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSection RtlUnwind LoadLibraryA

user32

SetCursor LoadCursorW GetWindowLongW GetDlgItem SetWindowLongW EndDialog SendDlgItemMessageW SetWindowPos LoadStringW CheckDlgButton GetSysColorBrush IsDlgButtonChecked MessageBoxW SetDlgItemTextW SendMessageW EnableWindow DialogBoxParamA SetWindowTextW CharLowerBuffW

gdi32

CreateFontIndirectW SetBkMode DeleteObject GetObjectW SetTextColor

advapi32

QueryServiceConfigW RegSetValueExW RegCloseKey ControlService RegOpenKeyExW ChangeServiceConfigW QueryServiceStatus StartServiceW RegOpenKeyW RegQueryValueExW RegCreateKeyW OpenServiceW OpenSCManagerW CloseServiceHandle AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

Sharing

General

Malware Config

Signatures

File Explorer

a2f360ebaa0de5f41a0885cc12782e26_JaffaCakes118

kernel32

user32

gdi32

advapi32

generic