089313a2d3ba3941a00261f1b545dccc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
089313a2d3ba3941a00261f1b545dccc_JaffaCakes118
Size 110KB
Sample240624-pyachssepb
SHA256 8646ea222228676662e7a949afb04a1914fdb222a4c238b548055d11b5d52600
MD5 089313a2d3ba3941a00261f1b545dccc
SHA1 f3f568d24c68319b46b76862331a7ea6f89a5678
SHA512 2e9864ee1acde382a58bc337bec23a2377b1ea89b5a9bf6a3c40311bd7d431dc7cc063f64b4423957553bc44274e91cb2ad0867c41194d389552a0d60ffb9952
SSDEEP 3072:2z6DeEsXOWidHURO7FX4/ZwcJxcx5uySAE5:2z6K/OWCHWO7Feh2qA4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089313a2d3ba3941a00261f1b545dccc_JaffaCakes118

File Explorer

089313a2d3ba3941a00261f1b545dccc_JaffaCakes118

.exe 110KB

089313a2d3ba3941a00261f1b545dccc_JaffaCakes118

IMPHASH d5285b16b4e0fe171182fc72d82d6588
SHA256 8646ea222228676662e7a949afb04a1914fdb222a4c238b548055d11b5d52600
MD5 089313a2d3ba3941a00261f1b545dccc
SHA1 f3f568d24c68319b46b76862331a7ea6f89a5678
SHA512 2e9864ee1acde382a58bc337bec23a2377b1ea89b5a9bf6a3c40311bd7d431dc7cc063f64b4423957553bc44274e91cb2ad0867c41194d389552a0d60ffb9952
SSDEEP 3072:2z6DeEsXOWidHURO7FX4/ZwcJxcx5uySAE5:2z6K/OWCHWO7Feh2qA4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15924

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle TerminateThread CreateThread InitializeCriticalSection CreateEventA GetSystemInfo UnmapViewOfFile CreateFileA VirtualQueryEx GetCurrentProcess MapViewOfFile CreateFileMappingA GetFileAttributesA FindClose FindNextFileA FindFirstFileA ReadFile DeleteCriticalSection GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange GetSystemTimeAsFileTime GetCurrentThread GetModuleHandleA GetModuleFileNameA EnterCriticalSection SetEvent SetThreadPriority LeaveCriticalSection SetFilePointer WaitForSingleObject

user32

GetMessageA SetTimer DispatchMessageA TranslateMessage KillTimer DestroyWindow UnregisterClassA LoadIconA LoadCursorA RegisterClassExA CreateWindowExA DefWindowProcA PostQuitMessage FindWindowA

advapi32

OpenSCManagerA QueryServiceStatus CloseServiceHandle RegOpenKeyA RegQueryValueExA RegCloseKey RegQueryValueA OpenServiceA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc

msvcp80

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr80

_onexit _decode_pointer _invoke_watson _controlfp_s _lock __dllonexit strrchr memset malloc __CxxFrameHandler3 ??1exception@std@@UAE@XZ ??3@YAXPAX@Z ??0exception@std@@QAE@XZ _invalid_parameter_noinfo ??2@YAPAXI@Z _CxxThrowException ??0exception@std@@QAE@ABV01@@Z ??_V@YAXPAX@Z strchr free ?terminate@@YAXXZ _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _encode_pointer __set_app_type _crt_debugger_hook ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _unlock

Sharing

General

Malware Config

Signatures

File Explorer

089313a2d3ba3941a00261f1b545dccc_JaffaCakes118

kernel32

user32

advapi32

shell32

msvcp80

msvcr80

generic