0819680f9633ccc846b3776cbc382bad_JaffaCakes118

General

Target
0819680f9633ccc846b3776cbc382bad_JaffaCakes118
Size 64KB
Sample240624-mzst5ssbpp
SHA256 29769d04d492b5e7022afc2ba7af9f487d3ce2f9b164b1a189c389a42b77995f
MD5 0819680f9633ccc846b3776cbc382bad
SHA1 93480c5c4d6c78b40df8b02aedf1fea4537a4b0d
SHA512 1abd9a4b75ee808b40a523bafd27b1c8134c68d59d1c66d251ccd7ad667a3b861100352b9c49f3f91fc01fce2aeffa9ba355b776351f31b350bfb28f6b270c03
SSDEEP 768:GTQ4Ghajq27LWlRJl/ny+0083sOWXezr5PqZwkk/aPi0C7FupuuBmIu:W0gZfwRPyhsMPqZFVCIFBmIu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0819680f9633ccc846b3776cbc382bad_JaffaCakes118

File Explorer

0819680f9633ccc846b3776cbc382bad_JaffaCakes118

.dll 64KB

0819680f9633ccc846b3776cbc382bad_JaffaCakes118

IMPHASH 279df4767cb226abc8a02d2a319ce438
SHA256 29769d04d492b5e7022afc2ba7af9f487d3ce2f9b164b1a189c389a42b77995f
MD5 0819680f9633ccc846b3776cbc382bad
SHA1 93480c5c4d6c78b40df8b02aedf1fea4537a4b0d
SHA512 1abd9a4b75ee808b40a523bafd27b1c8134c68d59d1c66d251ccd7ad667a3b861100352b9c49f3f91fc01fce2aeffa9ba355b776351f31b350bfb28f6b270c03
SSDEEP 768:GTQ4Ghajq27LWlRJl/ny+0083sOWXezr5PqZwkk/aPi0C7FupuuBmIu:W0gZfwRPyhsMPqZFVCIFBmIu
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\projects\firefox_extension\_XPCOM\xpcom-test\Release\acroff.pdb

kernel32

GlobalFree lstrlenW GetProcAddress LoadLibraryW WideCharToMultiByte lstrlenA FindClose FindNextFileW CloseHandle SetFileTime SetEndOfFile WriteFile SetFilePointer GlobalAlloc GetFileSize GetFileTime CreateFileW GetFileAttributesW lstrcmpW lstrcpyW lstrcatW GetModuleFileNameW GetModuleHandleW FindResourceExW FindResourceW LoadResource LockResource ReadFile SizeofResource InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RtlUnwind GetCurrentThreadId GetCommandLineA GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement ExitProcess Sleep SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetOEMCP LoadLibraryA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

wsprintfW wsprintfA UnregisterClassA

advapi32

RegDeleteValueW RegCreateKeyExW RegSetValueExW RegCloseKey RegOpenKeyExW

shell32

SHGetSpecialFolderPathW

Sharing

General

Malware Config

Signatures

File Explorer

0819680f9633ccc846b3776cbc382bad_JaffaCakes118

kernel32

user32

advapi32

shell32

generic