a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118

General

Target
a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118
Size 813KB
Sample240613-nk2dea1bmn
SHA256 7c128c3f2d025d3841ae3c3635f207eae7da96a8df42bf3b6c7897564a27c86d
MD5 a54a5b50399dd9cc9f515b73015fce06
SHA1 cba1fa8a234bd439185dd004ca59f25f928a3d0a
SHA512 4073f1765b1babb466144b2e85869c7b69eba79f8fd672096dc64782f2a9baaf54bb562a7ec618b66962ad9cca4d0703aaf0b9240a131b256d5b2026adccf5fd
SSDEEP 24576:IYqBcbxZGF3WvsbCnWnGlpW+16B/tATZI/3V:IYqyl0nbCnWn+p4/tATZ8V
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118

File Explorer

a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118

.exe 813KB

a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118

IMPHASH 15fb95d5be2d1e3d97b7f2900872fae7
SHA256 7c128c3f2d025d3841ae3c3635f207eae7da96a8df42bf3b6c7897564a27c86d
MD5 a54a5b50399dd9cc9f515b73015fce06
SHA1 cba1fa8a234bd439185dd004ca59f25f928a3d0a
SHA512 4073f1765b1babb466144b2e85869c7b69eba79f8fd672096dc64782f2a9baaf54bb562a7ec618b66962ad9cca4d0703aaf0b9240a131b256d5b2026adccf5fd
SSDEEP 24576:IYqBcbxZGF3WvsbCnWnGlpW+16B/tATZI/3V:IYqyl0nbCnWn+p4/tATZ8V
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

72834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress VirtualAlloc GetCurrentThreadId CloseHandle WaitForSingleObject FreeLibrary DeleteCriticalSection GetModuleFileNameW GetTickCount CreateEventA SetEvent Sleep GetCurrentProcess CreateEventW CopyFileW DeleteFileW GetFullPathNameW GetLastError GetCurrentProcessId LoadLibraryA VirtualFree SizeofResource LoadResource FindResourceW GetCommandLineW GetModuleHandleA HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

AccessCheck ConvertSidToStringSidA CryptDeriveKey

comctl32

ImageList_SetImageCount ImageList_DragEnter ImageList_Draw

Sharing

General

Malware Config

Signatures

File Explorer

a54a5b50399dd9cc9f515b73015fce06_JaffaCakes118

kernel32

advapi32

comctl32

generic