07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118
Size 535KB
Sample240624-ls36vswdla
SHA256 9ce6d854a063a7cf8c1b3da3ed1a105c918a80f2bbcfba837d18e31e0140cecf
MD5 07caf98f433f73a1041c03dedf85ad1f
SHA1 c03ba93b61c0f7b361ac140503b50e706b81ae7d
SHA512 97cd4699843b197bfe402a162a5cdc869a74954185376e908f857d093b84daa1f47bb8711f66a363eb48721e29d60d909d10ee2f6dc72e806d98e334e5b4c4ad
SSDEEP 12288:XvFxeIeI2H7nie9c8T/gEDH69PRnwF/sL:fFEIL2bnie9d/gO6PiF/sL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

File Explorer

07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118

.exe 535KB

07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118

IMPHASH 18bc6fa81e19f21156316b1ae696ed6b
SHA256 9ce6d854a063a7cf8c1b3da3ed1a105c918a80f2bbcfba837d18e31e0140cecf
MD5 07caf98f433f73a1041c03dedf85ad1f
SHA1 c03ba93b61c0f7b361ac140503b50e706b81ae7d
SHA512 97cd4699843b197bfe402a162a5cdc869a74954185376e908f857d093b84daa1f47bb8711f66a363eb48721e29d60d909d10ee2f6dc72e806d98e334e5b4c4ad
SSDEEP 12288:XvFxeIeI2H7nie9c8T/gEDH69PRnwF/sL:fFEIL2bnie9d/gO6PiF/sL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess lstrcmpiA ExitProcess GetCommandLineA GetWindowsDirectoryA GetTempPathA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA CopyFileA

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

07caf98f433f73a1041c03dedf85ad1f_JaffaCakes118

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic