a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118
Size 1.0MB
Sample240613-rx229axbqq
SHA256 e827ec1d9d08a3fdfa96646d9be3740f6160a33d4287646775ba0f9b2484b23a
MD5 a60cd4aa667cebc3f937dfafbc1439f9
SHA1 5e82c586e92d1d9ff7e0271173a24fac4fbc6433
SHA512 58e42ce0fa746f51bc627f06a5d4b1939ce803d689b5568b24be655dc5d8851e6e9e74ca002099ec6bdf53049d88370070d8a71934cf5c6a96cf8121697373be
SSDEEP 24576:0rcu3P3TWeHfTPidM3C/+Tb/uE6/8JNoufQd3TXwcAZDba0HZjkq:0rcu3PDP/TKO3cK/uE6qLQFX6ZDrZAq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118

File Explorer

a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118

.exe 1.0MB

a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118

IMPHASH bd6bbef32ca056229f7002ebcad29ddf
SHA256 e827ec1d9d08a3fdfa96646d9be3740f6160a33d4287646775ba0f9b2484b23a
MD5 a60cd4aa667cebc3f937dfafbc1439f9
SHA1 5e82c586e92d1d9ff7e0271173a24fac4fbc6433
SHA512 58e42ce0fa746f51bc627f06a5d4b1939ce803d689b5568b24be655dc5d8851e6e9e74ca002099ec6bdf53049d88370070d8a71934cf5c6a96cf8121697373be
SSDEEP 24576:0rcu3P3TWeHfTPidM3C/+Tb/uE6/8JNoufQd3TXwcAZDba0HZjkq:0rcu3PDP/TKO3cK/uE6qLQFX6ZDrZAq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

mfc42

ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord927 ord2514 ord2621 ord1134 ord641 ord800 ord825 ord5265 ord4376 ord4853 ord4998 ord4710 ord6052 ord4078 ord5300 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord324 ord4234 ord860 ord540 ord2370 ord4160 ord755 ord470 ord535 ord6334 ord939 ord1168 ord2863 ord2379 ord1146 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord1775 ord4673 ord1576

msvcrt

__p__commode __p__fmode __set_app_type _except_handler3 _controlfp __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit strlen strcpy _setmbcp __CxxFrameHandler _adjust_fdiv _ftol

kernel32

GetSystemDirectoryA SetHandleCount GlobalUnlock GetCurrentProcessId GlobalAlloc GetModuleHandleA GetStartupInfoA GlobalLock CreateFileA OpenProcess

user32

GetClipboardData DrawIcon AppendMenuA SendMessageA GetSystemMenu IsIconic EmptyClipboard OpenClipboard EnableWindow LoadIconA CloseClipboard SystemParametersInfoW GetClientRect SetClipboardData IsDialogMessageA GetSystemMetrics

advapi32

RegCreateKeyW

psapi

GetModuleFileNameExA

Sharing

General

Malware Config

Signatures

File Explorer

a60cd4aa667cebc3f937dfafbc1439f9_JaffaCakes118

mfc42

msvcrt

kernel32

user32

advapi32

psapi

generic