0803d6359855142888ef0d6b02703efa_JaffaCakes118

General

Target
0803d6359855142888ef0d6b02703efa_JaffaCakes118
Size 36KB
Sample240620-vj2fcasdrl
SHA256 27466689a40b25f1ba7f9c265b22df93744c88b04aa7cffcb25025f98958cae5
MD5 0803d6359855142888ef0d6b02703efa
SHA1 4d911b704848f11f1023071409dbe2fdaa3f557c
SHA512 9f00f73721702a86ec1fff6dc7aac676c9e6670ad10453528394c9a3e0cbbdbca19ff2d432c37c3008bee41016f5244299c1a4eae5d95a9f4581bd4925d70a22
SSDEEP 768:zp8wDZfEwdP6d90d6DoC8XtFIqjZSWGx7dMqi6qSy:+K+5vO6EC8XtCqFStJi6qSy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0803d6359855142888ef0d6b02703efa_JaffaCakes118

File Explorer

0803d6359855142888ef0d6b02703efa_JaffaCakes118

.dll 36KB

0803d6359855142888ef0d6b02703efa_JaffaCakes118

IMPHASH 4112e428c5f5ad288eb05c87cbad27ee
SHA256 27466689a40b25f1ba7f9c265b22df93744c88b04aa7cffcb25025f98958cae5
MD5 0803d6359855142888ef0d6b02703efa
SHA1 4d911b704848f11f1023071409dbe2fdaa3f557c
SHA512 9f00f73721702a86ec1fff6dc7aac676c9e6670ad10453528394c9a3e0cbbdbca19ff2d432c37c3008bee41016f5244299c1a4eae5d95a9f4581bd4925d70a22
SSDEEP 768:zp8wDZfEwdP6d90d6DoC8XtFIqjZSWGx7dMqi6qSy:+K+5vO6EC8XtCqFStJi6qSy
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17931

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InterlockedIncrement EnterCriticalSection InterlockedDecrement HeapDestroy MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleHandleA GetModuleFileNameA Sleep CloseHandle GetCurrentProcessId LeaveCriticalSection MoveFileA DeleteFileA SetFileAttributesA GetCommandLineW Process32Next Process32First CreateToolhelp32Snapshot FindNextFileA FindFirstFileA GetExitCodeProcess WaitForSingleObject CreateProcessA GetSystemDirectoryA DeleteCriticalSection InitializeCriticalSection DisableThreadLibraryCalls LoadLibraryA FreeLibrary lstrlenW WideCharToMultiByte ExitProcess CreateThread

user32

FindWindowExA SendMessageA IsWindow SetWindowTextA

advapi32

RegCloseKey RegEnumKeyExA RegQueryInfoKeyA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegDeleteKeyA

shell32

CommandLineToArgvW SHGetSpecialFolderPathA

ole32

CoCreateInstance CoInitialize

oleaut32

VariantClear SysStringLen LoadRegTypeLi SysAllocString SysFreeString

msvcrt

_strlwr _stricmp _strupr _adjust_fdiv malloc _initterm free strcat strrchr strcpy memset strstr sprintf memcmp ??2@YAPAXI@Z _purecall memcpy strlen ??3@YAXPAX@Z

Sharing

General

Malware Config

Signatures

File Explorer

0803d6359855142888ef0d6b02703efa_JaffaCakes118

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcrt

generic