0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118
Size 1.1MB
Sample240625-2pgrfsybkb
SHA256 69dda1503fac99e89db28a56ca025ebff300dae042c8d2f9d0907e0f324ae823
MD5 0fce43ef0e6574d80fa08e70ea579503
SHA1 3a506aa067ec1b49baed35f12128d546deee92ed
SHA512 76f767fa9e3dbd80472843255aaa4657117bc8332342fcf80dc18de759124c289024af030f3b9fdfc145d3cd13ca365f6cf96d307408832f4676b9f73ff0ad43
SSDEEP 24576:+4PHL90fjj4+HlWIPqyZPvqHWE5WYhTfJBzI/a7dQXTMOB:+8tQWaNZPbE5/hbJBs/8SDMOB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118

File Explorer

0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118

.exe 1.1MB

0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118

IMPHASH e416191384611794ef5d5c81e1887c02
SHA256 69dda1503fac99e89db28a56ca025ebff300dae042c8d2f9d0907e0f324ae823
MD5 0fce43ef0e6574d80fa08e70ea579503
SHA1 3a506aa067ec1b49baed35f12128d546deee92ed
SHA512 76f767fa9e3dbd80472843255aaa4657117bc8332342fcf80dc18de759124c289024af030f3b9fdfc145d3cd13ca365f6cf96d307408832f4676b9f73ff0ad43
SSDEEP 24576:+4PHL90fjj4+HlWIPqyZPvqHWE5WYhTfJBzI/a7dQXTMOB:+8tQWaNZPbE5/hbJBs/8SDMOB
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2643454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

@$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @@Dmain@Finalize @@Dmain@Initialize @@Loaddrv@Finalize @@Loaddrv@Initialize @@Shdocvw_ocx@Finalize @@Shdocvw_ocx@Initialize @Shdocvw_ocx@Register$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@BeforeDestruction$qqrv @Shdocvw_tlb@TCppCScriptErrorList@Connect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ConnectTo$qqr91%TComInterface$28Shdocvw_tlb@IScriptErrorListpx5_GUID$e&@Shdocvw_tlb@IID_IScriptErrorList$% @Shdocvw_tlb@TCppCScriptErrorList@Disconnect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@GetDefaultInterface$qv @Shdocvw_tlb@TCppCScriptErrorList@GetDunk$qqrv @Shdocvw_tlb@TCppCScriptErrorList@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@BeforeDestruction$qqrv @Shdocvw_tlb@TCppInternetExplorer@Connect$qqrv @Shdocvw_tlb@TCppInternetExplorer@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppInternetExplorer@Disconnect$qqrv @Shdocvw_tlb@TCppInternetExplorer@GetDefaultInterface$qv @Shdocvw_tlb@TCppInternetExplorer@GetDunk$qqrv @Shdocvw_tlb@TCppInternetExplorer@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@BeforeDestruction$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@Connect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@ConnectTo$qqr97%TComInterface$31Shdocvw_tlb@ISearchAssistantOC3px5_GUID$e&@Shdocvw_tlb@IID_ISearchAssistantOC3$% @Shdocvw_tlb@TCppSearchAssistantOC@Disconnect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@GetDefaultInterface$qv @Shdocvw_tlb@TCppSearchAssistantOC@GetDunk$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InitServerData$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@Connect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppShellBrowserWindow@Disconnect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellBrowserWindow@GetDunk$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InitServerData$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellUIHelper@Connect$qqrv @Shdocvw_tlb@TCppShellUIHelper@ConnectTo$qqr87%TComInterface$26Shdocvw_tlb@IShellUIHelperpx5_GUID$e&@Shdocvw_tlb@IID_IShellUIHelper$% @Shdocvw_tlb@TCppShellUIHelper@Disconnect$qqrv @Shdocvw_tlb@TCppShellUIHelper@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellUIHelper@GetDunk$qqrv @Shdocvw_tlb@TCppShellUIHelper@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellWindows@Connect$qqrv @Shdocvw_tlb@TCppShellWindows@ConnectTo$qqr85%TComInterface$25Shdocvw_tlb@IShellWindowspx5_GUID$e&@Shdocvw_tlb@IID_IShellWindows$% @Shdocvw_tlb@TCppShellWindows@Disconnect$qqrv @Shdocvw_tlb@TCppShellWindows@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellWindows@GetDunk$qqrv @Shdocvw_tlb@TCppShellWindows@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser@CControlData @Shdocvw_tlb@TCppWebBrowser@ClientToWindow$qqrpit1 @Shdocvw_tlb@TCppWebBrowser@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser@EventDispIDs @Shdocvw_tlb@TCppWebBrowser@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3 @Shdocvw_tlb@TCppWebBrowser@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser@GetProperty$qqrpb @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser@Navigate2$qqrp10tagVARIANTt1t1t1t1 @Shdocvw_tlb@TCppWebBrowser@OptParam @Shdocvw_tlb@TCppWebBrowser@PutProperty$qqrpb10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID @Shdocvw_tlb@TCppWebBrowser@Quit$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@ShowBrowserBar$qqrp10tagVARIANTt1t1 @Shdocvw_tlb@TCppWebBrowser@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Parent$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser_V1@CControlData @Shdocvw_tlb@TCppWebBrowser_V1@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser_V1@EventDispIDs @Shdocvw_tlb@TCppWebBrowser_V1@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser_V1@OptParam @Shdocvw_tlb@TCppWebBrowser_V1@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser_V1@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Parent$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@BeforeDestruction$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@Connect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ConnectTo$qqr89%TComInterface$27Shdocvw_tlb@IShellNameSpacepx5_GUID$e&@Shdocvw_tlb@IID_IShellNameSpace$% @Shdocvw_tlb@TShellFavoritesNameSpace@Disconnect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDefaultInterface$qv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDunk$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InitServerData$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% _Main __GetExceptDLLinfo ___CPPdebugHook

Name

.text

Size

Virtual Size

632KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

17KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eQ0

Size

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eQ1

Size

Virtual Size

630KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eQ2

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0fce43ef0e6574d80fa08e70ea579503_JaffaCakes118

advapi32

kernel32

version

wsock32

comctl32

gdi32

user32

ole32

oleaut32

generic