09fa781289c110bfec8cc933bcdad973_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
09fa781289c110bfec8cc933bcdad973_JaffaCakes118
Size 232KB
Sample240624-wh5xtavepc
SHA256 1acab0442d49fe3e88a06ca5ca8df078e94c5b0b262bc0e69c707343a7237683
MD5 09fa781289c110bfec8cc933bcdad973
SHA1 d6908c87268b056c9ef88183d57c70e1dcd2250e
SHA512 f5e05f10551abfcfd2b6703d3b00a974c58f96b0ca7ab0900146a5c31398dac4ce08888f4a7ee978cda33696074fcbdbf12d596663862bdc1b2c98fd4b6e9b5e
SSDEEP 3072:GZuPOxjCITCABgCK26qI4yt15Y1xDDHbS7/aSzZJ5h7x4yZIpV/vUgsmfRpbYewr:GZuBITCABgKqmxTW/PdJ5bbIpKomNO3O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09fa781289c110bfec8cc933bcdad973_JaffaCakes118

File Explorer

09fa781289c110bfec8cc933bcdad973_JaffaCakes118

.exe 232KB

09fa781289c110bfec8cc933bcdad973_JaffaCakes118

IMPHASH 80dac3db9f147e89caef155332b7cf8f
SHA256 1acab0442d49fe3e88a06ca5ca8df078e94c5b0b262bc0e69c707343a7237683
MD5 09fa781289c110bfec8cc933bcdad973
SHA1 d6908c87268b056c9ef88183d57c70e1dcd2250e
SHA512 f5e05f10551abfcfd2b6703d3b00a974c58f96b0ca7ab0900146a5c31398dac4ce08888f4a7ee978cda33696074fcbdbf12d596663862bdc1b2c98fd4b6e9b5e
SSDEEP 3072:GZuPOxjCITCABgCK26qI4yt15Y1xDDHbS7/aSzZJ5h7x4yZIpV/vUgsmfRpbYewr:GZuBITCABgKqmxTW/PdJ5bbIpKomNO3O
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

FindFirstFileA FindNextFileA LoadLibraryA GetProcAddress FreeLibrary CreateProcessA GetCurrentDirectoryA GetModuleFileNameA GetCurrentProcess CloseHandle GetLastError GetWindowsDirectoryA GetFileAttributesA SetFileAttributesA SetFilePointer VirtualAlloc VirtualFree SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA ReadFile SetStdHandle HeapAlloc FlushFileBuffers UnhandledExceptionFilter FreeEnvironmentStringsA IsBadReadPtr ExitProcess TerminateProcess RtlUnwind HeapFree DeleteFileA GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion HeapDestroy HeapCreate IsBadCodePtr WideCharToMultiByte GetCPInfo SetUnhandledExceptionFilter IsBadWritePtr MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetACP GetOEMCP WriteFile GetStdHandle GetFileType CreateFileA

user32

WaitForInputIdle

advapi32

RegCreateKeyA RegOpenKeyA RegQueryValueExA RegDeleteValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges PrivilegeCheck RegCloseKey RegCreateKeyExA RegSetValueExA

setupapi

SetupDiEnumDeviceInfo SetupOpenInfFileA SetupQueryInfVersionInformationA SetupGetInfInformationA SetupDiCallClassInstaller SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyA SetupDiSetDeviceRegistryPropertyA SetupDiClassGuidsFromNameA SetupDiGetClassDevsA SetupInstallFromInfSectionA SetupCopyOEMInfA

Sharing

General

Malware Config

Signatures

File Explorer

09fa781289c110bfec8cc933bcdad973_JaffaCakes118

newdev

kernel32

user32

advapi32

setupapi

generic