a6100c665fd57bfde92a882459e042ab_JaffaCakes118

General

Target
a6100c665fd57bfde92a882459e042ab_JaffaCakes118
Size 160KB
Sample240613-rzpvpsshpe
SHA256 d71325d6cd03bc49ec0b3f3eb66984c605a02064fe8cf2bfd608769746b4b0b2
MD5 a6100c665fd57bfde92a882459e042ab
SHA1 ef38713b3079724706c9eba5aebbae7eb474fd6a
SHA512 87df7eae4082f83b3ee4870f75c9528a49151892e4512330d1984361303221e4048158a828e23ad89cf7b14d6239da590f27b2f55ff18bfc52abf3d20d37d136
SSDEEP 1536:bXIDzUOhbJF7k5GYG7NYonizzTIJUW5k+iQcxbT5ZUs8jcdaflGRGr8XekUToiDw:TIgOh79yoizAk+i7T9adGRGrqmuj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6100c665fd57bfde92a882459e042ab_JaffaCakes118

File Explorer

a6100c665fd57bfde92a882459e042ab_JaffaCakes118

.exe 160KB

a6100c665fd57bfde92a882459e042ab_JaffaCakes118

IMPHASH f31ebcd0a0deae63a81e2d8a3be38e3f
SHA256 d71325d6cd03bc49ec0b3f3eb66984c605a02064fe8cf2bfd608769746b4b0b2
MD5 a6100c665fd57bfde92a882459e042ab
SHA1 ef38713b3079724706c9eba5aebbae7eb474fd6a
SHA512 87df7eae4082f83b3ee4870f75c9528a49151892e4512330d1984361303221e4048158a828e23ad89cf7b14d6239da590f27b2f55ff18bfc52abf3d20d37d136
SSDEEP 1536:bXIDzUOhbJF7k5GYG7NYonizzTIJUW5k+iQcxbT5ZUs8jcdaflGRGr8XekUToiDw:TIgOh79yoizAk+i7T9adGRGrqmuj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

22304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessWorkingSetSize ExitProcess TerminateProcess GetProcessId ExitThread TerminateThread GetLastError SetLastError GetFileInformationByHandle GetStdHandle CloseHandle TransmitCommChar GetLocalTime lstrcpyA GetProcessIoCounters GetModuleHandleW GetProcessShutdownParameters AddAtomA SetComputerNameExA SetConsoleCtrlHandler WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW OutputDebugStringW GlobalAlloc GetProcessTimes lstrcatA GetProcAddress HeapReAlloc GetCPInfo EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc HeapFree GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent GetCurrentThreadId GetProcessHeap GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree LCMapStringW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetOEMCP CreateFileW

user32

DestroyIcon GetScrollRange BeginPaint SendMessageW PeekMessageW GetCaretPos CopyImage

advapi32

ReportEventW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

a6100c665fd57bfde92a882459e042ab_JaffaCakes118

kernel32

user32

advapi32

msimg32

generic