030067112d2111c3cd3997710fcd3ee2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
030067112d2111c3cd3997710fcd3ee2_JaffaCakes118
Size 60KB
Sample240622-t8a41svcnd
SHA256 34c93f4c98cdaf139fcc6fb39019c60d7b6ee5cbed6d60d01ec4dae2f9522148
MD5 030067112d2111c3cd3997710fcd3ee2
SHA1 8198bf9010322cce547400375b25fe65278b83cd
SHA512 ed8198630e3cccb4d3ce609023fcbf6bdfe935c73434926b0ce6c878bb998c2a66122be58f5fccea4966a9048c663747c6aad86c752afbd293410dae296287f8
SSDEEP 768:JDacvmNjlmh9NdBqJc5grgGWb6nM/cZHNft/rZBlz18ao+mduTAKyj9b2mEhOaWG:IWSojOCmw6nMaN5Jqv7uTyj9NEhVF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
030067112d2111c3cd3997710fcd3ee2_JaffaCakes118

File Explorer

030067112d2111c3cd3997710fcd3ee2_JaffaCakes118

.dll 60KB

030067112d2111c3cd3997710fcd3ee2_JaffaCakes118

IMPHASH bc69299bcd77ac056b89b22d067658ea
SHA256 34c93f4c98cdaf139fcc6fb39019c60d7b6ee5cbed6d60d01ec4dae2f9522148
MD5 030067112d2111c3cd3997710fcd3ee2
SHA1 8198bf9010322cce547400375b25fe65278b83cd
SHA512 ed8198630e3cccb4d3ce609023fcbf6bdfe935c73434926b0ce6c878bb998c2a66122be58f5fccea4966a9048c663747c6aad86c752afbd293410dae296287f8
SSDEEP 768:JDacvmNjlmh9NdBqJc5grgGWb6nM/cZHNft/rZBlz18ao+mduTAKyj9b2mEhOaWG:IWSojOCmw6nMaN5Jqv7uTyj9NEhVF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32383

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

FindFirstFileA LocalFree MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW LeaveCriticalSection EnterCriticalSection GetCommandLineW RemoveDirectoryA CreateThread GetPrivateProfileStringA DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement HeapDestroy GetShortPathNameA GetModuleHandleA MoveFileA Process32Next Process32First SetFileAttributesA FindNextFileA FreeLibrary GetCurrentProcessId DeleteFileA ExitProcess CreateDirectoryA WritePrivateProfileStringA Sleep GetSystemDirectoryA GetModuleFileNameA CreateProcessA WaitForSingleObject CloseHandle GetExitCodeProcess GetProcAddress LoadLibraryA

advapi32

BuildExplicitAccessWithNameA SetEntriesInAclA GetNamedSecurityInfoA SetNamedSecurityInfoA RegOpenKeyExA RegQueryInfoKeyA RegEnumKeyExA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegCloseKey RegQueryValueExA

shell32

SHGetSpecialFolderPathA CommandLineToArgvW

ole32

CoGetInterfaceAndReleaseStream CoMarshalInterThreadInterfaceInStream CoCreateInstance CoInitialize CoUninitialize

oleaut32

SysStringLen LoadRegTypeLi SysAllocString VariantClear SysFreeString

msvcrt

fseek _strupr _strlwr _adjust_fdiv malloc _initterm free strncmp strncpy _purecall strcmp memcpy memcmp strchr atoi strcpy ??3@YAXPAX@Z memset sprintf strstr _access strcat ??2@YAPAXI@Z fclose fread ftell _stricmp fopen strrchr wcsstr _wcslwr strlen

shlwapi

SHSetValueA SHDeleteKeyA SHDeleteValueA

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

bdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

030067112d2111c3cd3997710fcd3ee2_JaffaCakes118

kernel32

advapi32

shell32

ole32

oleaut32

msvcrt

shlwapi

generic