a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118

General

Target
a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118
Size 294KB
Sample240612-w1jsasvdph
SHA256 443f276bd78c169686700239526e5c244bac39d67113ed4c0591a30c9cac9021
MD5 a1b94c04c8210b5467d54d1fd31486bc
SHA1 a963e342226dcc6a3c5d0bcb3b67e68d9afb92f6
SHA512 17eb69ac86561aae1ffbbf610f7f6eaaa2be80be55dc7590b3f1f7a56fc63eec72e09565ad6d4d3fdc51ec2baff58ca1560f1db70dcb029f059f292c952224d2
SSDEEP 6144:ezOUZL0wwAgsPgtePlriGxqxw0hM5PBugfvmSes7s4nYiayol:ezJZowwA2ePlrZxqxzMtA4vmy7s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118

File Explorer

a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118

.exe 294KB

a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118

IMPHASH 73ad673ac0c449ddca937f9e4c098d9f
SHA256 443f276bd78c169686700239526e5c244bac39d67113ed4c0591a30c9cac9021
MD5 a1b94c04c8210b5467d54d1fd31486bc
SHA1 a963e342226dcc6a3c5d0bcb3b67e68d9afb92f6
SHA512 17eb69ac86561aae1ffbbf610f7f6eaaa2be80be55dc7590b3f1f7a56fc63eec72e09565ad6d4d3fdc51ec2baff58ca1560f1db70dcb029f059f292c952224d2
SSDEEP 6144:ezOUZL0wwAgsPgtePlriGxqxw0hM5PBugfvmSes7s4nYiayol:ezJZowwA2ePlrZxqxzMtA4vmy7s
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

62110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress GetSystemTime GetTickCount SetStdHandle CloseHandle RtlUnwind RaiseException HeapFree GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA TlsAlloc SetLastError GetCurrentThreadId GetLastError TlsFree TlsSetValue TlsGetValue HeapAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType IsBadReadPtr IsBadCodePtr GetACP GetOEMCP GetCPInfo InitializeCriticalSection InterlockedExchange VirtualQuery LCMapStringA MultiByteToWideChar LCMapStringW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA GetStringTypeW HeapSize VirtualProtect GetSystemInfo GetLocaleInfoW InterlockedIncrement InterlockedDecrement FlushFileBuffers SetFilePointer ReadFile

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

a1b94c04c8210b5467d54d1fd31486bc_JaffaCakes118

kernel32

ole32

generic