a473acd514a850165712078ec49ba3b4_JaffaCakes118

General

Target
a473acd514a850165712078ec49ba3b4_JaffaCakes118
Size 373KB
Sample240613-jexe2szbja
SHA256 9f67cea814388754884dfa2778d0169136da473091ab3285b9f9ca444d5cc59e
MD5 a473acd514a850165712078ec49ba3b4
SHA1 45bda2f9f957dbb0da9a06f934facd9d17fb8f86
SHA512 03c5e20d9e9ba6d21e871a6e2f51ef3043e002656dbf50c6904c4908ae88fd4ae4901c282a3548f8f930f2bc0958c457de544a707f1f830cd1bd0a404bac051a
SSDEEP 6144:SGkORa/mgnQXgZG9PvK6pu4Dx0DrQlqK3BvN+Vz1dbroBjQmafsQQRwbreMnnYJ:WOmmgnQb9K6pVD+QEK3BvN+mjQmafsQE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a473acd514a850165712078ec49ba3b4_JaffaCakes118

File Explorer

a473acd514a850165712078ec49ba3b4_JaffaCakes118

.exe 373KB

a473acd514a850165712078ec49ba3b4_JaffaCakes118

IMPHASH 7d6c7d7568076064bb859f4a80f7856a
SHA256 9f67cea814388754884dfa2778d0169136da473091ab3285b9f9ca444d5cc59e
MD5 a473acd514a850165712078ec49ba3b4
SHA1 45bda2f9f957dbb0da9a06f934facd9d17fb8f86
SHA512 03c5e20d9e9ba6d21e871a6e2f51ef3043e002656dbf50c6904c4908ae88fd4ae4901c282a3548f8f930f2bc0958c457de544a707f1f830cd1bd0a404bac051a
SSDEEP 6144:SGkORa/mgnQXgZG9PvK6pu4Dx0DrQlqK3BvN+Vz1dbroBjQmafsQQRwbreMnnYJ:WOmmgnQb9K6pVD+QEK3BvN+mjQmafsQE
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\stout.pdb

kernel32

MapViewOfFile CreateFileMappingW CreateFileW GetTempFileNameW GetTempPathW UnmapViewOfFile LockResource LoadResource FindResourceW GetModuleHandleW SizeofResource CloseHandle WriteConsoleW ReadFile RaiseException RtlUnwind EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError HeapFree HeapAlloc IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetProcAddress EnterCriticalSection LeaveCriticalSection Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte HeapReAlloc LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle

advapi32

RegOpenKeyExW

mscoree

CorBindToRuntimeEx

Sharing

General

Malware Config

Signatures

File Explorer

a473acd514a850165712078ec49ba3b4_JaffaCakes118

kernel32

advapi32

mscoree

generic