a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118
Size 152KB
Sample240614-dc3ldssfka
SHA256 a028f8af10e350b32d9229ea6b14e3563f98f39cea6dae8565a103f582068eb3
MD5 a7c446c1c5b91dcd595dac4b0ba08f33
SHA1 4be974f209bf9aa43389f27524673266ecf00b8e
SHA512 7f4c6a27f65186d1527be616399faeac7bfd79cc0db3fbda2c97717f040a52df41d65750866827fc8bd74b2f6c38a3b873d5a2a8bb541192ada7dbb1ef38c36a
SSDEEP 3072:1/MkQHFH+/nFRm3hslxQzAmnqvai+oW2ImibhvlE:4FefmySAmnCxGv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118

File Explorer

a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118

.exe 152KB

a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118

IMPHASH 63d9a32ebdd5daf5801711100aa2574b
SHA256 a028f8af10e350b32d9229ea6b14e3563f98f39cea6dae8565a103f582068eb3
MD5 a7c446c1c5b91dcd595dac4b0ba08f33
SHA1 4be974f209bf9aa43389f27524673266ecf00b8e
SHA512 7f4c6a27f65186d1527be616399faeac7bfd79cc0db3fbda2c97717f040a52df41d65750866827fc8bd74b2f6c38a3b873d5a2a8bb541192ada7dbb1ef38c36a
SSDEEP 3072:1/MkQHFH+/nFRm3hslxQzAmnqvai+oW2ImibhvlE:4FefmySAmnCxGv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep FreeLibrary CompareStringW CompareStringA ReadFile SetEndOfFile GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter InterlockedExchange GetOEMCP GetACP CreateFileA FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA VirtualQuery GetSystemInfo GlobalAlloc GetCPInfo GetLocaleInfoA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile CloseHandle LCMapStringW MultiByteToWideChar LCMapStringA GetTimeZoneInformation WideCharToMultiByte HeapSize GlobalLock GlobalUnlock GetCurrentProcess GetExitCodeProcess ExitProcess OutputDebugStringA GetLastError GetComputerNameA lstrcpyA lstrcatA IsBadReadPtr VirtualAlloc LoadLibraryA VirtualProtect GetProcAddress TerminateProcess IsBadWritePtr HeapReAlloc VirtualFree HeapCreate HeapDestroy RaiseException SetEnvironmentVariableA GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA HeapFree GetSystemTimeAsFileTime RtlUnwind HeapAlloc

user32

ReleaseDC ShowWindow wsprintfA MessageBoxA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DeleteMenu GetSystemMenu GetClientRect GetWindowRect SystemParametersInfoA SetWindowPos AdjustWindowRectEx ValidateRect GetMenu PostQuitMessage PeekMessageA SendMessageA GetMessageA TranslateMessage DispatchMessageA WaitMessage DefWindowProcA UnregisterClassA DestroyWindow LoadCursorA RegisterClassExA SetRect AdjustWindowRect CreateWindowExA GetDC UpdateWindow SetFocus GetWindowLongA SetWindowLongA

winmm

timeGetTime

d3d8

Direct3DCreate8

wsock32

bind WSAStartup send recv connect closesocket htons getservbyname socket WSACleanup gethostbyname

Sharing

General

Malware Config

Signatures

File Explorer

a7c446c1c5b91dcd595dac4b0ba08f33_JaffaCakes118

kernel32

user32

winmm

d3d8

wsock32

generic