a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118
Size 460KB
Sample240613-qext5sthqm
SHA256 435b529dcf9cd6b4e188258a0f18221ff40cc3b8e7ec573c194de0b010c1f062
MD5 a5b58e1905b6c01ef65523d2fd3ca76b
SHA1 3d20f1ce8318b8e8c0ba4d2a3fd28f739eef3da2
SHA512 6df29a978dde02c86bc99dbf24066df2ca8be64446544fc446b0228451abbb37043c3d3acb9680ebe06802a9058ab53d456ff5352808483be91d859034bf1419
SSDEEP 6144:51/OnXYifjcF7RQmlbIIi/xpE1UcygKsT9hL+N6W2b6j05kb/kc0:n/OIifoFqmlbIb4KsXL2yb6Yvv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118

File Explorer

a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118

.exe 460KB

a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118

IMPHASH c514a482a0833f5502358fa676b07867
SHA256 435b529dcf9cd6b4e188258a0f18221ff40cc3b8e7ec573c194de0b010c1f062
MD5 a5b58e1905b6c01ef65523d2fd3ca76b
SHA1 3d20f1ce8318b8e8c0ba4d2a3fd28f739eef3da2
SHA512 6df29a978dde02c86bc99dbf24066df2ca8be64446544fc446b0228451abbb37043c3d3acb9680ebe06802a9058ab53d456ff5352808483be91d859034bf1419
SSDEEP 6144:51/OnXYifjcF7RQmlbIIi/xpE1UcygKsT9hL+N6W2b6j05kb/kc0:n/OIifoFqmlbIb4KsXL2yb6Yvv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31093

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile SetLastError FreeLibrary GetTimeZoneInformation LoadLibraryA GetModuleHandleA InterlockedExchange CompareStringA GetProcessHeap FlushFileBuffers CreateFileA Heap32First TryEnterCriticalSection GetSystemDefaultLangID SetEndOfFile ReadConsoleOutputAttribute EncodePointer DecodePointer Sleep Beep SetStdHandle EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetLastError GetFileType GetCommandLineW HeapSetInformation HeapSize ExitProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread DeleteCriticalSection FatalAppExitA FindFirstFileExW RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetFileAttributesA GetACP GetOEMCP HeapFree HeapAlloc IsProcessorFeaturePresent SetConsoleCtrlHandler SetHandleCount GetStdHandle SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime WriteFile HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc RtlUnwind CloseHandle FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExA FindNextFileA GetExitCodeProcess WaitForSingleObject GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode SetEnvironmentVariableA

user32

FillRect SetMenuInfo ChangeDisplaySettingsExA

gdi32

RectInRegion GetStretchBltMode CreateSolidBrush OffsetRgn

winspool.drv

DeletePrinterConnectionA

advapi32

RegSaveKeyA CryptGetDefaultProviderA SystemFunction001 SetNamedSecurityInfoW

Sharing

General

Malware Config

Signatures

File Explorer

a5b58e1905b6c01ef65523d2fd3ca76b_JaffaCakes118

kernel32

user32

gdi32

winspool.drv

advapi32

generic