a06da98b18ab1ba7e28d26918994da08_JaffaCakes118

General

Target
a06da98b18ab1ba7e28d26918994da08_JaffaCakes118
Size 242KB
Sample240612-m5zvmssclc
SHA256 4743dff7bf5c1aa61b45c2bb674f666c2a02afd2f55112f2e91ef3a86285a628
MD5 a06da98b18ab1ba7e28d26918994da08
SHA1 e6c588621bb57f96e37279ca52d11e480bd45eac
SHA512 95ff093583f346754a78027cc4f20c91f2bda467ae0e05d1c7c3ca609a519202cbb8afb69321a369812f48b7f3458e94567b11b70d3db174865e1c695511ffb1
SSDEEP 3072:73DuNsgrBDc1ahPzHykLXX2OQFL9W3aeeFUtxu77euFruksbEF3fpPf+XKFD8T5V:7362grvzSkLHx3eF6xu7T+Ebfqv1V
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a06da98b18ab1ba7e28d26918994da08_JaffaCakes118

File Explorer

a06da98b18ab1ba7e28d26918994da08_JaffaCakes118

.exe 242KB

a06da98b18ab1ba7e28d26918994da08_JaffaCakes118

IMPHASH 479db675b8862963552379aa58511c11
SHA256 4743dff7bf5c1aa61b45c2bb674f666c2a02afd2f55112f2e91ef3a86285a628
MD5 a06da98b18ab1ba7e28d26918994da08
SHA1 e6c588621bb57f96e37279ca52d11e480bd45eac
SHA512 95ff093583f346754a78027cc4f20c91f2bda467ae0e05d1c7c3ca609a519202cbb8afb69321a369812f48b7f3458e94567b11b70d3db174865e1c695511ffb1
SSDEEP 3072:73DuNsgrBDc1ahPzHykLXX2OQFL9W3aeeFUtxu77euFruksbEF3fpPf+XKFD8T5V:7362grvzSkLHx3eF6xu7T+Ebfqv1V
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9601

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess GetProcAddress LoadLibraryA AddAtomA GetProcessAffinityMask VirtualProtect LoadLibraryW EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID CreateFileW SetStdHandle WriteConsoleW GetTempPathA GetDriveTypeW GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DecodePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle IsValidLocale

user32

PostQuitMessage DefWindowProcA EnableScrollBar LoadImageA DestroyWindow

gdi32

GetEnhMetaFileHeader

Sharing

General

Malware Config

Signatures

File Explorer

a06da98b18ab1ba7e28d26918994da08_JaffaCakes118

kernel32

user32

gdi32

generic