a4d135c5d69e39e97884875deac3e658_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a4d135c5d69e39e97884875deac3e658_JaffaCakes118
Size 81KB
Sample240613-lack7asepf
SHA256 208c60c0ba9138ee204ef71d7a37f20f6a2e9536ec03af5a0caa519ad116a971
MD5 a4d135c5d69e39e97884875deac3e658
SHA1 eead840a4154deac1fe8444aa554160791bbabaf
SHA512 4f923156612f4635389f4e9d97bf4e3c656f307ae9083da01d0110ddd219c66282f3dca9ff1c41b06885966913a28f48babd55f168f8bc567b2ac7b79ae8b866
SSDEEP 1536:2GkezP9GjuEGtHIPRSR+COF8oEJHmLtpNri:2GhFGCDHI52OF8oEJGLtbi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a4d135c5d69e39e97884875deac3e658_JaffaCakes118

.exe 81KB

a4d135c5d69e39e97884875deac3e658_JaffaCakes118

IMPHASH 865a4699dc989a6c4020da5d4bc37278
SHA256 208c60c0ba9138ee204ef71d7a37f20f6a2e9536ec03af5a0caa519ad116a971
MD5 a4d135c5d69e39e97884875deac3e658
SHA1 eead840a4154deac1fe8444aa554160791bbabaf
SHA512 4f923156612f4635389f4e9d97bf4e3c656f307ae9083da01d0110ddd219c66282f3dca9ff1c41b06885966913a28f48babd55f168f8bc567b2ac7b79ae8b866
SSDEEP 1536:2GkezP9GjuEGtHIPRSR+COF8oEJHmLtpNri:2GhFGCDHI52OF8oEJGLtbi
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

25572

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId GetCurrentThreadId GetShortPathNameA CreateProcessA GetVersionExA GetProcAddress GetModuleHandleA ExpandEnvironmentStringsA GetFileAttributesExA OutputDebugStringA FileTimeToLocalFileTime SetFilePointer CreateDirectoryA GetLocalTime FreeLibrary LoadLibraryA SetEnvironmentVariableA CompareStringW CompareStringA lstrcatA DeleteFileA CreateFileA WriteFile MoveFileA GetPrivateProfileStringA ResetEvent CloseHandle GetTickCount Sleep GetLastError SetEvent lstrcpyA GetModuleFileNameA CreateEventA CreateThread WaitForSingleObject TerminateThread lstrcmpiA FileTimeToSystemTime lstrlenA FlushFileBuffers SetStdHandle SetConsoleCtrlHandler GetOEMCP GetACP GetCPInfo IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW ExitProcess TerminateProcess GetCurrentProcess RtlUnwind GetTimeZoneInformation GetSystemTime HeapFree HeapAlloc GetStartupInfoA GetCommandLineA GetVersion HeapReAlloc HeapSize GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA

user32

wvsprintfA wsprintfA

advapi32

RegEnumKeyA RegQueryValueExA RegOpenKeyA RegCreateKeyA RegSetValueExA RegCloseKey SetServiceStatus RegisterServiceCtrlHandlerA EnumServicesStatusA StartServiceA OpenServiceA QueryServiceStatus ControlService DeleteService OpenSCManagerA CreateServiceA ChangeServiceConfig2A CloseServiceHandle StartServiceCtrlDispatcherA RegOpenKeyExA

shell32

SHGetFileInfoA ShellExecuteA

wininet

HttpQueryInfoA InternetSetOptionA InternetOpenA InternetReadFile InternetCloseHandle InternetOpenUrlA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

shlwapi

SHDeleteKeyA SHDeleteValueA

Sharing

General

Malware Config

Signatures

File Explorer

a4d135c5d69e39e97884875deac3e658_JaffaCakes118

PE Signature issue

kernel32

user32

advapi32

shell32

wininet

version

shlwapi

generic