b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118
Size 269KB
Sample240616-e7bltszdqc
SHA256 faf5f6076053edb694b6338f937cb7fd89423abdb4a02bd775ca821d9ffd8774
MD5 b1bda473f5d99c38e9ea7df6eba48c40
SHA1 9103f262fc6f491b5eb7ff9d85b2f2f6ac85fce5
SHA512 ceac42e250f4ef226e67131821146d803396ff21f6961caafbeba7392e9c23e17278d7401ed6e189896d47ae876077bdb8ccd6a2dd8ce8a8c1326d8703c38d44
SSDEEP 6144:9CLPmPWI/urJSAIyXpuXeLxBCCmJJhQd:9CDiWICAyf5YJGd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118

File Explorer

b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118

.exe 269KB

b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118

IMPHASH d9e1ca2bc4538ec7ff0743eaaca8cfcb
SHA256 faf5f6076053edb694b6338f937cb7fd89423abdb4a02bd775ca821d9ffd8774
MD5 b1bda473f5d99c38e9ea7df6eba48c40
SHA1 9103f262fc6f491b5eb7ff9d85b2f2f6ac85fce5
SHA512 ceac42e250f4ef226e67131821146d803396ff21f6961caafbeba7392e9c23e17278d7401ed6e189896d47ae876077bdb8ccd6a2dd8ce8a8c1326d8703c38d44
SSDEEP 6144:9CLPmPWI/urJSAIyXpuXeLxBCCmJJhQd:9CDiWICAyf5YJGd
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37828

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

prntvpt

ord9 ord6 ord4 ord2 ord7

kernel32

LocalFree FindResourceW GetStdHandle GetModuleHandleW SizeofResource WriteConsoleA ReadConsoleW WriteConsoleW SetFilePointerEx LockResource LoadResource LocalAlloc GetLastError CloseHandle CreateFileW ReadFile WideCharToMultiByte SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers MultiByteToWideChar GetStringTypeW HeapReAlloc LeaveCriticalSection EnterCriticalSection EnumSystemLocalesW GetUserDefaultLCID IsValidLocale EncodePointer DecodePointer HeapAlloc RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent IsDebuggerPresent WriteFile GetModuleFileNameW HeapFree InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress HeapSize Sleep InterlockedIncrement IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId GetProcessHeap GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree OutputDebugStringW LoadLibraryExW LoadLibraryW LCMapStringW GetLocaleInfoW

user32

LoadStringW

gdi32

EndPage StartPage EndDoc StartDocW DeleteDC CreateDCW ExtEscape TextOutW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

CryptAcquireContextA

ole32

CreateStreamOnHGlobal CoTaskMemAlloc CoCreateInstance CoTaskMemFree

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

b1bda473f5d99c38e9ea7df6eba48c40_JaffaCakes118

prntvpt

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

generic