a3726b2d165347176c10dba02534b4c3_JaffaCakes118

General

Target
a3726b2d165347176c10dba02534b4c3_JaffaCakes118
Size 416KB
Sample240613-ca1tcazfma
SHA256 3abc80b7bd2a9f02327ab4a8ef16f2f00831bd067eb76eaf66104f0912ec4e86
MD5 a3726b2d165347176c10dba02534b4c3
SHA1 b4e5a61b4d3ca5929cc6deb289e428dba04678a0
SHA512 48bb89687db2b9a4f0d78c1e1cb389944dd9eaee8722340535791721ce81a7f7f9d0686a3882ccbc4a20cca9d90c9fe096cf5613f8569a7cf2fb7bdcda34c2aa
SSDEEP 6144:0P2z/Khv3nc40EwSod2NBYOyOfg2vhBXplWuQajDMixNf6mvFiIK3lX3DmAupEus:ODhvM40EwSolEnplMUDLxl6A9Gl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3726b2d165347176c10dba02534b4c3_JaffaCakes118

File Explorer

a3726b2d165347176c10dba02534b4c3_JaffaCakes118

.exe 416KB

a3726b2d165347176c10dba02534b4c3_JaffaCakes118

IMPHASH 21605c5b17ad966900db4f37c446e77e
SHA256 3abc80b7bd2a9f02327ab4a8ef16f2f00831bd067eb76eaf66104f0912ec4e86
MD5 a3726b2d165347176c10dba02534b4c3
SHA1 b4e5a61b4d3ca5929cc6deb289e428dba04678a0
SHA512 48bb89687db2b9a4f0d78c1e1cb389944dd9eaee8722340535791721ce81a7f7f9d0686a3882ccbc4a20cca9d90c9fe096cf5613f8569a7cf2fb7bdcda34c2aa
SSDEEP 6144:0P2z/Khv3nc40EwSod2NBYOyOfg2vhBXplWuQajDMixNf6mvFiIK3lX3DmAupEus:ODhvM40EwSolEnplMUDLxl6A9Gl
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

139566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeW GetExitCodeProcess

shell32

SHCreateDirectoryExA

winspool.drv

CloseSpoolFileHandle SetPrinterDataExW EndDocPrinter

ole32

CoCreateInstance CoInitialize CoUninitialize

advapi32

SetSecurityInfo RegCloseKey RegDeleteKeyW CryptAcquireContextW CryptGetHashParam GetSecurityInfo RegOpenKeyExW RegSetValueExW GetAce CryptHashData RegNotifyChangeKeyValue CryptCreateHash RegQueryValueExW RegCreateKeyExW CryptDestroyHash CryptReleaseContext

user32

CreateWindowExW PostMessageW DefWindowProcW MonitorFromRect LoadStringW CallWindowProcW SetTimer SetWindowLongW EndDialog SystemParametersInfoW CharNextW SetWindowTextW GetSysColorBrush SendMessageW DispatchMessageW DialogBoxParamW SetForegroundWindow FindWindowW GetMonitorInfoW IsDlgButtonChecked KillTimer SendDlgItemMessageW CheckDlgButton PostQuitMessage DefDlgProcW GetDesktopWindow RegisterClassW ShowWindow MessageBoxW GetMessageW GetDlgItem GetParent CloseWindowStation GetClientRect SetWindowPos TranslateMessage DestroyWindow GetSystemMetrics LoadIconW GetWindowRect GetWindowLongW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy

Sharing

General

Malware Config

Signatures

File Explorer

a3726b2d165347176c10dba02534b4c3_JaffaCakes118

kernel32

shell32

winspool.drv

ole32

advapi32

user32

comctl32

generic