0b891b09c8c1aee1745443533a6c7600_JaffaCakes118

General

Target
0b891b09c8c1aee1745443533a6c7600_JaffaCakes118
Size 135KB
Sample240625-atts2azgrc
SHA256 96965fe2a15e09d4fac585dcfea3a86375d0b2eae78954b8f7e882748e6f0e1e
MD5 0b891b09c8c1aee1745443533a6c7600
SHA1 5733db19ce711deeb6c3dece564aedd207227574
SHA512 99b563758f0e65ab94e760d1ad069574f31694c6fff05b98ab24c1c4c6a8848898850d7c02ccf7d339baee71dcfd3f7638b12d8fb3e558d4eb61751d2d934f9c
SSDEEP 1536:saxELwGmA73dhfpG8oGQKA0AbCLEYGfExWsmiT1jKbDA2Y5O6EcVCrCYVFhrNdTg:sLwtA7Nhp3uhGLEYGN+d8lKCr3xNiBn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b891b09c8c1aee1745443533a6c7600_JaffaCakes118

File Explorer

0b891b09c8c1aee1745443533a6c7600_JaffaCakes118

.exe 135KB

0b891b09c8c1aee1745443533a6c7600_JaffaCakes118

IMPHASH 655b4d602d50534838f029cb0c73d49f
SHA256 96965fe2a15e09d4fac585dcfea3a86375d0b2eae78954b8f7e882748e6f0e1e
MD5 0b891b09c8c1aee1745443533a6c7600
SHA1 5733db19ce711deeb6c3dece564aedd207227574
SHA512 99b563758f0e65ab94e760d1ad069574f31694c6fff05b98ab24c1c4c6a8848898850d7c02ccf7d339baee71dcfd3f7638b12d8fb3e558d4eb61751d2d934f9c
SSDEEP 1536:saxELwGmA73dhfpG8oGQKA0AbCLEYGfExWsmiT1jKbDA2Y5O6EcVCrCYVFhrNdTg:sLwtA7Nhp3uhGLEYGN+d8lKCr3xNiBn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegConnectRegistryW RegQueryValueExW RegOpenKeyExW RegCloseKey

kernel32

LocalFree lstrcmpW ReleaseMutex WaitForSingleObject CreateThread SetEvent CloseHandle SetPriorityClass OpenProcess TerminateProcess CreateEventW CreateMutexW lstrlenW lstrcmpiW lstrcpyW GetComputerNameW LocalAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW WideCharToMultiByte GetCPInfo GetACP GetOEMCP SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree RtlUnwind WriteFile GetProcAddress GetStringTypeA GetStringTypeW HeapFree HeapAlloc VirtualAlloc LoadLibraryA LCMapStringA LCMapStringW

user32

SendDlgItemMessageW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW CreateDialogParamW LoadCursorW PostQuitMessage SetClassLongW LoadIconW PostMessageW MessageBoxW SetFocus DestroyWindow EnableWindow GetDlgItem DialogBoxParamW PeekMessageW SetCursor SendMessageW wsprintfW EndDialog SetDlgItemTextW GetDlgItemTextW SetDlgItemInt CheckRadioButton

Sharing

General

Malware Config

Signatures

File Explorer

0b891b09c8c1aee1745443533a6c7600_JaffaCakes118

advapi32

kernel32

user32

generic