b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118
Size 667KB
Sample240616-mlx7pszepc
SHA256 d845c4b381af87516303f17b8e6fac5de6b85d20e7490891bf4fc440fd291b82
MD5 b30d449495d94a2d25e70e2c3f8a99b5
SHA1 dcc4b8171d662959e62d3f38def4b58cc94605ee
SHA512 55a30081804721faa2864603aacfc355a95e7cc671a3eaaed851d29e2e9d56c665545e338508efb644a39ee8aca62972a1d47787dcf8038ef4df3f2e892497ef
SSDEEP 12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCzoCGsq:U2JC/t8iVNoDgQVN6mCiptSX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118

File Explorer

b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118

.exe 667KB

b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118

IMPHASH beb5959bb1e83e2e3f4789da7e63bdcd
SHA256 d845c4b381af87516303f17b8e6fac5de6b85d20e7490891bf4fc440fd291b82
MD5 b30d449495d94a2d25e70e2c3f8a99b5
SHA1 dcc4b8171d662959e62d3f38def4b58cc94605ee
SHA512 55a30081804721faa2864603aacfc355a95e7cc671a3eaaed851d29e2e9d56c665545e338508efb644a39ee8aca62972a1d47787dcf8038ef4df3f2e892497ef
SSDEEP 12288:U2JhG//t8C5VCFSoDpaQlHfl6mCiWDaBMFCzoCGsq:U2JC/t8iVNoDgQVN6mCiptSX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DODO\Videos\TwoStageSearch\TwoStageSearch\TwoStageSearch\Release\TwoStageSearch.pdb

kernel32

Sleep GetExitCodeProcess ReadFile CreateFileW GetTempPathW GetFileSizeEx GetLastError GetCurrentDirectoryW GetProcAddress VirtualAlloc FindClose SetCurrentDirectoryW FindNextFileW CloseHandle DeleteFileW FlushFileBuffers GetFullPathNameA WriteConsoleW CreateProcessW WaitForSingleObject ReadConsoleW SetEndOfFile GetTimeZoneInformation SetStdHandle RtlUnwind HeapReAlloc OutputDebugStringW LoadLibraryExW FreeLibrary SetConsoleCtrlHandler SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LoadLibraryW GetStringTypeW SetEnvironmentVariableW LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection RaiseException GetFileAttributesExW CreateSemaphoreW GetTickCount GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter GetFullPathNameW PeekNamedPipe GetFileType GetFileInformationByHandle FileTimeToLocalFileTime HeapSize GetModuleFileNameW WriteFile GetStdHandle AreFileApisANSI GetModuleHandleExW ExitProcess GetProcessHeap WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId GetModuleHandleW GetLocaleInfoW FindFirstFileExW GetLogicalDriveStringsW GetEnvironmentVariableW GetCurrentThread SetLastError GetCPInfo GetOEMCP SetFilePointer FindFirstFileW CreateFileA GetTempFileNameW FatalAppExitA GetACP IsValidCodePage GetCommandLineW HeapFree HeapAlloc EncodePointer DecodePointer GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent SetEnvironmentVariableA

user32

EndPaint ClientToScreen DestroyWindow GetWindowTextLengthW TranslateAcceleratorW ScreenToClient GetWindowRect SetActiveWindow GetMessageW SendInput PostQuitMessage SetKeyboardState GetKeyState GetSubMenu GetFocus DialogBoxParamW GetParent LoadCursorW GetClipCursor FindWindowW GetClientRect SetFocus BeginPaint wsprintfW TranslateMessage LoadAcceleratorsW GetKeyboardState GetMenu RegisterClassExW OffsetRect GetAsyncKeyState MessageBoxA SetCursorPos LoadMenuW GetAncestor GetWindowTextW PeekMessageW GetDlgItem EndDialog GetDesktopWindow GetCursorPos LoadStringW EnumChildWindows ShowWindow SetMenu GetSysColorBrush LoadBitmapW CreateDialogParamW FindWindowExW ClipCursor CreateWindowExW SetMenuDefaultItem MessageBoxW GetComboBoxInfo GetSystemMetrics IsWindowVisible SendMessageW UpdateWindow GetDlgCtrlID SetWindowTextW DefWindowProcW CopyRect GetWindow MoveWindow DispatchMessageW LoadIconW

gdi32

CreateFontW DeleteObject

advapi32

CryptAcquireContextA

shell32

ShellExecuteW SHOpenWithDialog ShellExecuteExW

comctl32

ord413 ImageList_Add ImageList_Create ord410

shlwapi

ord191 PathMatchSpecW

Sharing

General

Malware Config

Signatures

File Explorer

b30d449495d94a2d25e70e2c3f8a99b5_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

generic