a65dbde756972a43ab1114a0f510e94c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a65dbde756972a43ab1114a0f510e94c_JaffaCakes118
Size 108KB
Sample240613-tctlgsvgkb
SHA256 1a8809a9d4795428ad3a1e1439fe3965e53bc88190ced79cc97b3ea5381aa83d
MD5 a65dbde756972a43ab1114a0f510e94c
SHA1 dd24a4ca73d122e0ba3d4ac966bc1d67f9746041
SHA512 0e6aee5fb375d3a136238158311a42c0bef050c80ec868955b9527fcfd018a7ea75fa90c4e115bc8aa24893bba910b38bc48d5bc8fee6049f254119234241ffb
SSDEEP 1536:ebqV8t0PNAoo4PBMJP2EHM9J3YYvM2iROs:ebq/PSP26MUYv75s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a65dbde756972a43ab1114a0f510e94c_JaffaCakes118

File Explorer

a65dbde756972a43ab1114a0f510e94c_JaffaCakes118

.exe 108KB

a65dbde756972a43ab1114a0f510e94c_JaffaCakes118

IMPHASH f12c00974c9c2666620f07b99ed96972
SHA256 1a8809a9d4795428ad3a1e1439fe3965e53bc88190ced79cc97b3ea5381aa83d
MD5 a65dbde756972a43ab1114a0f510e94c
SHA1 dd24a4ca73d122e0ba3d4ac966bc1d67f9746041
SHA512 0e6aee5fb375d3a136238158311a42c0bef050c80ec868955b9527fcfd018a7ea75fa90c4e115bc8aa24893bba910b38bc48d5bc8fee6049f254119234241ffb
SSDEEP 1536:ebqV8t0PNAoo4PBMJP2EHM9J3YYvM2iROs:ebq/PSP26MUYv75s
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4425 ord3597 ord641 ord324 ord825 ord2302 ord800 ord1768 ord535 ord4160 ord537 ord4710 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord4424 ord3738 ord561 ord815 ord616 ord656 ord2621 ord2725 ord3610 ord2411 ord3749 ord4218 ord2578 ord6055 ord1776 ord4398 ord5290 ord3402 ord3582 ord1146 ord1168 ord860 ord540 ord567 ord2358 ord2370 ord2298 ord2301 ord2860 ord2863 ord2379 ord755 ord470 ord6199 ord6334 ord1200 ord2642 ord3092 ord4275 ord3721 ord3619 ord795 ord283 ord823 ord3626 ord3663 ord2414 ord1641 ord5678 ord3797 ord3874 ord5789 ord5787 ord5875 ord5873 ord6172 ord5736 ord3573 ord809 ord556 ord1088 ord2122 ord2754 ord6358 ord858 ord6197 ord2859 ord6880 ord2864 ord6605 ord941 ord5572 ord2915 ord3089 ord6376 ord2055 ord2648 ord4441 ord4837 ord3798 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord2514 ord4998 ord4853 ord4376 ord5265 ord2023 ord4234 ord1576

msvcrt

_adjust_fdiv __p__commode _initterm _setmbcp __p__fmode __set_app_type _except_handler3 __setusermatherr __CxxFrameHandler _mbsnbcpy _access _wcslwr malloc _mbsstr __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _controlfp

kernel32

GetStartupInfoA GetModuleHandleA WinExec GetWindowsDirectoryA LoadLibraryA FreeLibrary ExitProcess MulDiv GetCurrentDirectoryA

user32

GetMessagePos SetCursor FillRect InflateRect ReleaseDC GetDC GetParent CopyIcon LoadCursorA GetSysColor PtInRect GetSystemMetrics DrawIcon GetSystemMenu AppendMenuA LoadIconA ScreenToClient FindWindowExA GetWindowRect MoveWindow ShowWindow GetClientRect InvalidateRect SetTimer MessageBeep KillTimer DestroyCursor RegisterWindowMessageA IsIconic RedrawWindow EnableWindow SetWindowTextA SendMessageA GetDlgItem GetWindowLongA SetWindowLongA IsWindow

gdi32

GetTextExtentPoint32A CreateSolidBrush GetStockObject GetObjectA DeleteDC GetDeviceCaps CreateDCA CreateFontIndirectA

advapi32

RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

SHGetFileInfoA SHGetSpecialFolderLocation SHGetSpecialFolderPathA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc ShellExecuteA

ole32

CoInitialize CoUninitialize

msvcp60

??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??0Init@ios_base@std@@QAE@XZ

Name

.text

Size

32KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

48KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a65dbde756972a43ab1114a0f510e94c_JaffaCakes118

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcp60

generic