b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118
Size 145KB
Sample240616-pk2jvaxbpp
SHA256 279f77d5c95cd7b415ed0798a3f807c77b6c17dc90510a60ad67ab962808ceee
MD5 b37d78852bd0833c2d036bf3996e1e5e
SHA1 0eb1c74f2043886aafa5d55f3a553d81dcf087b2
SHA512 a0dd871daea2916dad0de9819394ccb0c8ed276d08bb861e6224e0d3cf3d1ddd874cef382637ba475a920e342af93a3e2d50a66f3863326621cf83deb470fd27
SSDEEP 3072:d4wOi31tMsKSvJwjTPsjuHwLj5FycOhV5iRvgYfWXGyNkPfr/N2:4UYsKSvGHsJNNOh/ippw7kPD/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118

File Explorer

b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118

.exe 145KB

b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118

IMPHASH fb07d04bdc5b2c60e496d1ee84f41509
SHA256 279f77d5c95cd7b415ed0798a3f807c77b6c17dc90510a60ad67ab962808ceee
MD5 b37d78852bd0833c2d036bf3996e1e5e
SHA1 0eb1c74f2043886aafa5d55f3a553d81dcf087b2
SHA512 a0dd871daea2916dad0de9819394ccb0c8ed276d08bb861e6224e0d3cf3d1ddd874cef382637ba475a920e342af93a3e2d50a66f3863326621cf83deb470fd27
SSDEEP 3072:d4wOi31tMsKSvJwjTPsjuHwLj5FycOhV5iRvgYfWXGyNkPfr/N2:4UYsKSvGHsJNNOh/ippw7kPD/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

75842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

A:\WindowsProcessManager-master\WindowsProcessManager-master\Release\TaskMgr.pdb

kernel32

Process32NextW Process32FirstW CreateToolhelp32Snapshot VirtualAlloc GetCurrentProcessId GetCurrentThreadId GetTickCount CreateProcessW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange GetSystemTimeAsFileTime TerminateProcess OpenProcess QueryFullProcessImageNameW CloseHandle GetCurrentProcess GetLastError FormatMessageW QueryPerformanceCounter ExitProcess

user32

SendMessageW DefWindowProcW CreateWindowExW wsprintfW GetMessageW UpdateWindow SetTimer RegisterClassExW LoadCursorW LoadIconW TranslateMessage DispatchMessageW PostQuitMessage ShowWindow MessageBoxW SetWindowTextW GetWindowTextW

advapi32

OpenProcessToken AdjustTokenPrivileges LookupAccountSidW GetTokenInformation GetUserNameW LookupPrivilegeValueW

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

comctl32

InitCommonControlsEx

psapi

GetProcessMemoryInfo

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

msvcr90

_invoke_watson _controlfp_s _lock _except_handler4_common _crt_debugger_hook ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode _adjust_fdiv wcschr ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ __setusermatherr ??3@YAXPAX@Z ??0exception@std@@QAE@XZ __CxxFrameHandler3 wprintf ??_V@YAXPAX@Z wcsncpy _wcsdup memset malloc _invalid_parameter_noinfo _CxxThrowException ??0exception@std@@QAE@ABV01@@Z ??2@YAPAXI@Z _unlock __dllonexit _encode_pointer ??1exception@std@@UAE@XZ _onexit _decode_pointer _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

b37d78852bd0833c2d036bf3996e1e5e_JaffaCakes118

kernel32

user32

advapi32

msvcp90

comctl32

psapi

version

msvcr90

generic