00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

General

Target
00e53405cdc27d8d1016e2be971808c1_JaffaCakes118
Size 185KB
Sample240619-2fnteayhjp
SHA256 8c19f6171d469fe5d4fed2463c1ef852849211c43b0196e37c08a4ed016be2b5
MD5 00e53405cdc27d8d1016e2be971808c1
SHA1 b67f8842bf6f1d5e5258fe52f12a8943580c38e1
SHA512 508cc347da6f7d8ba8e56505a2d857314da0e3a4c1010ec53ad2c2317f9b2ae051b9db49f5732199f150cd58432d5e1272bdd72862263f141731e547ef8f2dec
SSDEEP 3072:POFkIGhBURhgXJNvWFF5QkwwMxyQfmVFm5lyCvmHmQ0ta+lvMjaOzL:PB4SXDvSDWhz+v8PmHia+lmaOzL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

File Explorer

00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

.exe 185KB

00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

IMPHASH 975d939508e86272b9cb8e47baa13c1a
SHA256 8c19f6171d469fe5d4fed2463c1ef852849211c43b0196e37c08a4ed016be2b5
MD5 00e53405cdc27d8d1016e2be971808c1
SHA1 b67f8842bf6f1d5e5258fe52f12a8943580c38e1
SHA512 508cc347da6f7d8ba8e56505a2d857314da0e3a4c1010ec53ad2c2317f9b2ae051b9db49f5732199f150cd58432d5e1272bdd72862263f141731e547ef8f2dec
SSDEEP 3072:POFkIGhBURhgXJNvWFF5QkwwMxyQfmVFm5lyCvmHmQ0ta+lvMjaOzL:PB4SXDvSDWhz+v8PmHia+lmaOzL
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

R:\ksmoxdexYa\DQqptdrostcI\miMgaczo.pdb

msvcrt

swscanf clearerr srand isalnum isspace iswspace toupper towlower strcspn fgetc _controlfp wcscat strrchr ungetc strtol iswdigit __set_app_type wcscspn fread __p__fmode strspn wcsncmp calloc isupper __p__commode gets qsort isxdigit getenv isalpha strcpy _amsg_exit wcsrchr towupper setvbuf remove _initterm fgets _acmdln exit mbtowc _ismbblead iswxdigit _XcptFilter _exit _cexit __setusermatherr __getmainargs

gdi32

RestoreDC CreatePolygonRgn GetObjectW EnumFontFamiliesExW GetDIBColorTable GetFontData SetDIBColorTable CreateDCW GetBitmapBits SetBkMode DeleteObject LineDDA SetAbortProc StretchBlt GetTextExtentPoint32W SetWindowOrgEx SetPaletteEntries GetTextAlign MoveToEx OffsetRgn SelectPalette GetNearestColor CreateDIBitmap PatBlt CreateBrushIndirect ExtTextOutA EnumFontFamiliesW RectVisible CreateDiscardableBitmap Ellipse ScaleViewportExtEx CreatePen CreateHalftonePalette CreateFontIndirectA LPtoDP GetTextMetricsW SetRectRgn GetTextExtentPointA BeginPath TextOutA GetRgnBox OffsetViewportOrgEx CreatePalette GetTextExtentExPointW SelectClipRgn GetClipBox GetTextMetricsA GetPixel CreateBitmap GetWindowOrgEx SetWindowExtEx

kernel32

GetStartupInfoW FindFirstFileA lstrcpynW GetModuleHandleW GetStartupInfoA SetCurrentDirectoryW DeleteCriticalSection GetThreadTimes SetCommTimeouts GlobalFindAtomW FormatMessageA GetComputerNameA EnterCriticalSection SearchPathA GetModuleFileNameW GetTempFileNameA lstrcmpiW GetComputerNameW SetThreadPriority GetSystemDefaultUILanguage ResetEvent SetLocalTime GetSystemDirectoryW LoadLibraryW TlsFree GetDateFormatW GetBinaryTypeA GetWindowsDirectoryW GetVersion VerSetConditionMask MoveFileExW WinExec EnumResourceLanguagesA GetThreadPriority lstrcatA SetFilePointer MoveFileA MoveFileW GetTempPathA EnumResourceNamesW CreateNamedPipeW GlobalFlags GetFileAttributesA GetStdHandle FreeLibrary UnmapViewOfFile ExitThread CreateEventW SetTimerQueueTimer CompareStringW OpenFileMappingA TransactNamedPipe ResumeThread GetHandleInformation SearchPathW HeapValidate

user32

RegisterClassA GetIconInfo IsCharUpperA ArrangeIconicWindows CharNextW ShowWindowAsync SetTimer CreateDialogParamW CharLowerW MonitorFromRect InsertMenuW InflateRect SetMenuItemBitmaps GetScrollInfo SetUserObjectInformationW IntersectRect CharPrevA DialogBoxParamW DrawStateW ScrollWindow LoadBitmapW IsCharAlphaNumericW DrawEdge MapVirtualKeyA LoadIconA GetDlgCtrlID CharPrevW OpenIcon GetSystemMenu SendMessageW wsprintfW EnumChildWindows CheckMenuRadioItem SetWindowRgn InsertMenuA GetLastActivePopup DefFrameProcW DragObject DefDlgProcA PostQuitMessage DefWindowProcW DestroyIcon GetMessageTime ReplyMessage GetClassLongA CreateIconIndirect MonitorFromPoint MapVirtualKeyExW AdjustWindowRectEx GetDlgItem OffsetRect wvsprintfW SendMessageTimeoutW LoadMenuA GetKeyboardLayout CreateAcceleratorTableW WaitMessage GetClientRect GetScrollPos SetCaretPos GetMenuStringA GetSystemMetrics RegisterClassW FillRect SetWindowPos TranslateMessage CheckMenuItem IsCharAlphaW CreateDialogParamA InternalGetWindowText IsZoomed SendInput OpenInputDesktop InsertMenuItemW IsIconic SetFocus LoadBitmapA GetKeyNameTextW GetMessageExtraInfo GetWindowTextA GetSubMenu GetKeyboardLayoutNameW GetUserObjectInformationA UnloadKeyboardLayout WaitForInputIdle SwitchToThisWindow SetDlgItemInt OemToCharBuffA SystemParametersInfoW GetUserObjectInformationW ShowCursor GetMenuState ShowOwnedPopups GetMenuItemCount wvsprintfA LoadImageA GetMessageW GetCursorPos FindWindowA PostThreadMessageW RedrawWindow GetKeyState GetAltTabInfoW ShowScrollBar CallWindowProcW HideCaret SystemParametersInfoA IsWindowVisible GetClassLongW GetWindowLongA GetScrollRange GetDC RegisterWindowMessageW GetAsyncKeyState WindowFromPoint GetDoubleClickTime GetMenuItemID PostThreadMessageA DrawIcon SetWindowPlacement LoadMenuW

Sharing

General

Malware Config

Signatures

File Explorer

00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

msvcrt

gdi32

kernel32

user32

generic