0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0afb3ab61b555c124b6daecebcd77401_JaffaCakes118
Size 204KB
Sample240624-2falsaycpm
SHA256 9936d47b871ef345ceca55fd54205ca0d420c581fecbd96c1d6cf98a25d62005
MD5 0afb3ab61b555c124b6daecebcd77401
SHA1 3987cf580e9cb12db8026b30f84deb156125c829
SHA512 ea7bf59830f0f79e1a1fe421af915dd3f6ace8767bc4c53744cfee7df7081ad818d0a0bb555b27a701d8632d887d83362f9579181586cb915351b17f4cd4a3b6
SSDEEP 3072:1x7A0b/kzWBojBGYZdlM1RobOdMDdLXsIhQcDOd:1tAQCbHlgWqdMuIhQcDO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

File Explorer

0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

.exe 204KB

0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

IMPHASH 10aa9e88a1521455cba316d53922f1e7
SHA256 9936d47b871ef345ceca55fd54205ca0d420c581fecbd96c1d6cf98a25d62005
MD5 0afb3ab61b555c124b6daecebcd77401
SHA1 3987cf580e9cb12db8026b30f84deb156125c829
SHA512 ea7bf59830f0f79e1a1fe421af915dd3f6ace8767bc4c53744cfee7df7081ad818d0a0bb555b27a701d8632d887d83362f9579181586cb915351b17f4cd4a3b6
SSDEEP 3072:1x7A0b/kzWBojBGYZdlM1RobOdMDdLXsIhQcDOd:1tAQCbHlgWqdMuIhQcDO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55981

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

gdiplus

GdiplusStartup GdipCloneImage GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipLoadImageFromFile GdipLoadImageFromFileICM GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipGraphicsClear GdipGetImageHeight GdipGetImageWidth GdiplusShutdown GdipCreateFromHDC GdipSetClipRectI GdipDrawImageRectI GdipFree

kernel32

GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentThreadId TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentProcess lstrlenA InterlockedIncrement InterlockedDecrement MulDiv GlobalUnlock GetLastError GlobalLock CloseHandle CreateThread CreateEventA SetEvent MultiByteToWideChar

user32

LoadIconA DefMDIChildProcA GetWindowLongA SetWindowLongA LoadCursorA GetClientRect BeginPaint ShowWindow CreateWindowExA RegisterClassExA EndPaint LoadStringA MessageBoxA DialogBoxParamA SendDlgItemMessageA SetDlgItemTextA SetWindowTextA EndDialog MsgWaitForMultipleObjects PeekMessageA GetMenu GetSubMenu PostQuitMessage SetCursor EnableMenuItem DestroyWindow SendMessageA DefFrameProcA GetMessageA TranslateMDISysAccel TranslateMessage DispatchMessageA

advapi32

CryptAcquireContextA

shell32

ShellAboutA

ole32

CoTaskMemAlloc CLSIDFromString PropVariantClear CoInitialize CoUninitialize CoCreateInstance CoTaskMemRealloc CreateStreamOnHGlobal GetHGlobalFromStream CoTaskMemFree

msvcr90

_controlfp_s _invoke_watson _except_handler4_common _crt_debugger_hook ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit _decode_pointer _onexit _lock _encode_pointer __dllonexit _unlock memcpy ??2@YAPAXI@Z malloc wcslen ??3@YAXPAX@Z abs memcmp memset __CxxFrameHandler3 _wcslwr _snprintf

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ ??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

Sharing

General

Malware Config

Signatures

File Explorer

0afb3ab61b555c124b6daecebcd77401_JaffaCakes118

comctl32

gdiplus

kernel32

user32

advapi32

shell32

ole32

msvcr90

msvcp90

generic