a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118

General

Target
a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118
Size 184KB
Sample240613-aw1dla1cmp
SHA256 60d8d38447c779710c2eba45a15dea762d74731ef2d5d1ece7c753239fe6a403
MD5 a32b19dbe80b1e04a6cd7c63c0f7c77e
SHA1 6ad939f00827a023a63d5d7b9316afca71c9d696
SHA512 e92c38c0241ecb7a508736743d6e291792314a567da9224e54cf6a468c964d93bb6c506c9c912a83bdcc8b4d709f6180155a912cfba89a1c23b2d777a7a0a0cc
SSDEEP 3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3x:/7BSH8zUB+nGESaaRvoB7FJNndn4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118

File Explorer

a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118

.exe 184KB

a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118

IMPHASH be3154a7cc7ab2b0631b9c25c67b9da0
SHA256 60d8d38447c779710c2eba45a15dea762d74731ef2d5d1ece7c753239fe6a403
MD5 a32b19dbe80b1e04a6cd7c63c0f7c77e
SHA1 6ad939f00827a023a63d5d7b9316afca71c9d696
SHA512 e92c38c0241ecb7a508736743d6e291792314a567da9224e54cf6a468c964d93bb6c506c9c912a83bdcc8b4d709f6180155a912cfba89a1c23b2d777a7a0a0cc
SSDEEP 3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3x:/7BSH8zUB+nGESaaRvoB7FJNndn4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

58012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetTempFileNameW WaitForSingleObject Sleep GetFileAttributesW lstrlenW GetTempPathW GetLastError lstrcatW CloseHandle DeleteFileW GetTempPathA lstrcpyW lstrcpyA GetCommandLineW GetProcAddress ReadFile GetModuleFileNameW CreateFileW SetEndOfFile WriteConsoleW SetStdHandle HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetLocaleInfoW GetSystemTimeAsFileTime LoadLibraryW GetFileSize FreeLibrary GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree WideCharToMultiByte GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId HeapSize GetStringTypeW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType HeapCreate SetFilePointer WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetProcessHeap

user32

GetMessageA RegisterClassExA PostQuitMessage LoadIconA MessageBoxA CreateWindowExA DefWindowProcA ShowWindow DispatchMessageA LoadCursorA TranslateMessage

advapi32

RegCloseKey GetUserNameW

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

a32b19dbe80b1e04a6cd7c63c0f7c77e_JaffaCakes118

kernel32

user32

advapi32

shell32

generic