0580ae61006da9e62ed6282ab0d95478_JaffaCakes118

General

Target
0580ae61006da9e62ed6282ab0d95478_JaffaCakes118
Size 240KB
Sample240620-nd143avarb
SHA256 1456c2e7b003c70bb0605f3567967a38827885d78e42c7ea35b192b217580919
MD5 0580ae61006da9e62ed6282ab0d95478
SHA1 1d471f757b7d8157681f73714e86b5a4bf15a45c
SHA512 abddbffcdee6362b336901bcf8ef9b7b10929648e1ceafafa86c0f65434e9838a3b66d259732035d486020e18a435914f76eb7d73e40e51423301acf649f1541
SSDEEP 3072:gRiUfrKD/qa6uGkgIkeiZhUl2872dzBvWu036AyMWwwtu4DOQ4DkC7dcb43sASjZ:UfryWuUIUhfddv+3pwVDMTw1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0580ae61006da9e62ed6282ab0d95478_JaffaCakes118

File Explorer

0580ae61006da9e62ed6282ab0d95478_JaffaCakes118

.exe 240KB

0580ae61006da9e62ed6282ab0d95478_JaffaCakes118

IMPHASH 3f51a53cb1b7a4c77d57269c64fe7821
SHA256 1456c2e7b003c70bb0605f3567967a38827885d78e42c7ea35b192b217580919
MD5 0580ae61006da9e62ed6282ab0d95478
SHA1 1d471f757b7d8157681f73714e86b5a4bf15a45c
SHA512 abddbffcdee6362b336901bcf8ef9b7b10929648e1ceafafa86c0f65434e9838a3b66d259732035d486020e18a435914f76eb7d73e40e51423301acf649f1541
SSDEEP 3072:gRiUfrKD/qa6uGkgIkeiZhUl2872dzBvWu036AyMWwwtu4DOQ4DkC7dcb43sASjZ:UfryWuUIUhfddv+3pwVDMTw1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11813

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

WSAAccept WSANtohs

kernel32

GetLastError CompareStringW CompareStringA LoadLibraryA GetModuleHandleA GetLocaleInfoW GetTimeZoneInformation GetSystemInfo HeapFree ExitProcess GetSystemTimeAsFileTime GetStartupInfoA GetCommandLineA GetVersionExA HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc IsBadWritePtr RaiseException GetProcAddress DebugBreak QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetModuleFileNameA TerminateProcess GetCurrentProcess WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetEnvironmentVariableA GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc SetLastError GetCurrentThread TlsFree TlsSetValue TlsGetValue InitializeCriticalSection RtlUnwind InterlockedExchange VirtualQuery CloseHandle GetProcessHeap FreeLibrary SetFilePointer GetACP GetOEMCP GetCPInfo SetStdHandle HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage FlushFileBuffers VirtualProtect

user32

wvsprintfA wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

0580ae61006da9e62ed6282ab0d95478_JaffaCakes118

ws2_32

kernel32

user32

generic