a518be09e97033f6bc700797e84da026_JaffaCakes118

General

Target
a518be09e97033f6bc700797e84da026_JaffaCakes118
Size 845KB
Sample240613-mk4m4avekb
SHA256 a60eb988305670121012071e5810486b91a8a9e6f515e6cfeb4840b09051032b
MD5 a518be09e97033f6bc700797e84da026
SHA1 b2db62be525e1d12790fb0ad2ccbaa95f12fecec
SHA512 ca9bf393333803faf2a64da4fb3461c57a4c52f5702e0a03f6e3a4130fae3415310a1b4827f97d24e851715371d0ea9aca209298a9e4027700f3c12589b0a578
SSDEEP 24576:wYK0rAeL+KxJU3PH9LLzUu6g/ktVzaUmIsX8t668rgm:wdteyQJUftc8cVTmIsMI0m
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a518be09e97033f6bc700797e84da026_JaffaCakes118

File Explorer

a518be09e97033f6bc700797e84da026_JaffaCakes118

.exe 845KB

a518be09e97033f6bc700797e84da026_JaffaCakes118

IMPHASH de423faf40b1a3799e36544fa77eaeeb
SHA256 a60eb988305670121012071e5810486b91a8a9e6f515e6cfeb4840b09051032b
MD5 a518be09e97033f6bc700797e84da026
SHA1 b2db62be525e1d12790fb0ad2ccbaa95f12fecec
SHA512 ca9bf393333803faf2a64da4fb3461c57a4c52f5702e0a03f6e3a4130fae3415310a1b4827f97d24e851715371d0ea9aca209298a9e4027700f3c12589b0a578
SSDEEP 24576:wYK0rAeL+KxJU3PH9LLzUu6g/ktVzaUmIsX8t668rgm:wdteyQJUftc8cVTmIsMI0m
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

92727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RemoveDirectoryA GetTempPathA CloseHandle WriteFile CreateFileA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect LoadLibraryA GetProcAddress VirtualAlloc GetCurrentThreadId CreateDirectoryA FreeLibrary DeleteCriticalSection GetCommandLineW GetTickCount CreateEventA SetEvent Sleep GetCurrentProcessId GetCurrentProcess CopyFileW DeleteFileW GetFullPathNameW GetTempPathW SetCurrentDirectoryA GetModuleFileNameW VirtualFree SizeofResource LoadResource GetModuleHandleA WaitForSingleObject FindResourceW GetLastError HeapFree ReadFile GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW GetSystemTimeAsFileTime HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo GetFileAttributesExW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW HeapReAlloc OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW WriteConsoleW SetEndOfFile HeapSize

advapi32

AddAccessDeniedAce CryptCreateHash CryptAcquireContextW

comctl32

PropertySheetW ImageList_Write ImageList_LoadImageA

Sharing

General

Malware Config

Signatures

File Explorer

a518be09e97033f6bc700797e84da026_JaffaCakes118

kernel32

advapi32

comctl32

generic