a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118

General

Target
a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118
Size 720KB
Sample240613-ms95vavgpc
SHA256 1c3ef89ff6e8e7c2d11ea71d5e6fa7f5e0752acb68220dc95ebf12a04795940a
MD5 a52433e49e30bc58957a3ce29f4dcfda
SHA1 e6ca25e60651b2cdc08c2e1dec4a0b7050e5fbaa
SHA512 3a1570051951af26f8d2e7b44a1376bbbc92e19e511cc1d8708b1f02f4a93cc1ac73d13c39e7b6301527e31c41030032bf2fd046afa0db1980ac1d335a918907
SSDEEP 12288:tviiRYG8wKRQu2Fww8thNu9SWNMN/JWLs2Ez31DIoAXycpJGfl:t6iOvRQRp8V2S0MbWo24lkoSw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118

File Explorer

a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118

.exe 720KB

a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118

IMPHASH 3492a7a37dd69954f8f4580079a9e7ba
SHA256 1c3ef89ff6e8e7c2d11ea71d5e6fa7f5e0752acb68220dc95ebf12a04795940a
MD5 a52433e49e30bc58957a3ce29f4dcfda
SHA1 e6ca25e60651b2cdc08c2e1dec4a0b7050e5fbaa
SHA512 3a1570051951af26f8d2e7b44a1376bbbc92e19e511cc1d8708b1f02f4a93cc1ac73d13c39e7b6301527e31c41030032bf2fd046afa0db1980ac1d335a918907
SSDEEP 12288:tviiRYG8wKRQu2Fww8thNu9SWNMN/JWLs2Ez31DIoAXycpJGfl:t6iOvRQRp8V2S0MbWo24lkoSw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

214150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreatePipe FreeEnvironmentStringsW GetTempFileNameW lstrcatA GetModuleFileNameA EnumResourceTypesA FileTimeToSystemTime EnumDateFormatsExW EnumResourceLanguagesW SetFileAttributesA GetVersionExA IsBadWritePtr LocalCompact CreateJobObjectA lstrcatW GlobalUnlock GetProcessTimes FindAtomA GetPrivateProfileStructA FindNextVolumeW _llseek FindNextVolumeMountPointA GetSystemWindowsDirectoryW SetFileApisToOEM FindResourceA SizeofResource CreateSemaphoreA GetModuleHandleA EnumResourceTypesW GetLocaleInfoW Process32First CreateJobObjectW GetEnvironmentVariableW SetSystemTime WaitForDebugEvent CreateWaitableTimerA IsDBCSLeadByteEx CreateMailslotA CreateNamedPipeA GetStringTypeW CreateHardLinkA SetMailslotInfo SetFileAttributesW FileTimeToDosDateTime GetSystemDefaultLangID GetProcessShutdownParameters CreateIoCompletionPort GetCurrentThreadId CreateTimerQueueTimer InterlockedExchangeAdd ConnectNamedPipe CreateWaitableTimerW CreateDirectoryExW GlobalDeleteAtom LocalAlloc LocalFree CompareStringW GlobalGetAtomNameW GlobalAddAtomA EnumTimeFormatsA SetEnvironmentVariableW RequestWakeupLatency GetFileAttributesExW GetCalendarInfoA WriteFileGather IsBadStringPtrA EnumUILanguagesA FileTimeToLocalFileTime WaitNamedPipeA LocalReAlloc DosDateTimeToFileTime GetQueuedCompletionStatus UpdateResourceW WriteProfileSectionA GetSystemTimeAsFileTime SetTapePosition FreeResource InterlockedExchange DeleteVolumeMountPointA SetTimeZoneInformation SetCalendarInfoA GetDefaultCommConfigA EnumSystemLanguageGroupsW DebugBreak GetAtomNameA Process32NextW GetThreadTimes SetProcessWorkingSetSize GetThreadPriorityBoost SetTapeParameters BackupWrite OpenEventW FatalExit QueueUserAPC lstrcmpW FormatMessageW GetCurrencyFormatW GlobalWire GetCommMask SetEvent GetTempFileNameA CreateFileMappingA AssignProcessToJobObject BindIoCompletionCallback

user32

ActivateKeyboardLayout MessageBoxW SetLayeredWindowAttributes SetKeyboardState OpenInputDesktop IntersectRect HideCaret DrawCaption MessageBoxIndirectW AttachThreadInput CharLowerBuffW IsRectEmpty DrawAnimatedRects GetSysColor PtInRect GetKeyboardLayout GetMessageA ToUnicode GetFocus GetDoubleClickTime

shlwapi

PathAppendA PathCombineA

Sharing

General

Malware Config

Signatures

File Explorer

a52433e49e30bc58957a3ce29f4dcfda_JaffaCakes118

kernel32

user32

shlwapi

generic