0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118

General

Target
0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118
Size 132KB
Sample240625-axtmfatfnp
SHA256 13247c8a4fdf6445490840961840575db9648aaf07c01fa6071aa81f32975eff
MD5 0b8dcd3ffc4cd765dc58e33a22cee7f2
SHA1 47472307a94ccb3b8cebc5215fbbb6371bdc0fb7
SHA512 c985e5d86aea673aa626d86e05ccc29f097e05ab2a7e337b7595bf4902a4f99cad77bf74dfc021a8570b9f098fd524a0530959fd4a2aa2aa97e1dc6b6e2d5a66
SSDEEP 1536:+2o6nwzfqmUSa4Ndg+VCmCc0Fo2/xrbR02R9LRv7yQtFy+lYhFLyd+7:Do6nwLqrSa4I+VCmMFoW0cv7yQLxlMM+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118

File Explorer

0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118

.dll 132KB

0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118

IMPHASH 43faca19a24ebb6f045ead2184d44df3
SHA256 13247c8a4fdf6445490840961840575db9648aaf07c01fa6071aa81f32975eff
MD5 0b8dcd3ffc4cd765dc58e33a22cee7f2
SHA1 47472307a94ccb3b8cebc5215fbbb6371bdc0fb7
SHA512 c985e5d86aea673aa626d86e05ccc29f097e05ab2a7e337b7595bf4902a4f99cad77bf74dfc021a8570b9f098fd524a0530959fd4a2aa2aa97e1dc6b6e2d5a66
SSDEEP 1536:+2o6nwzfqmUSa4Ndg+VCmCc0Fo2/xrbR02R9LRv7yQtFy+lYhFLyd+7:Do6nwLqrSa4I+VCmMFoW0cv7yQLxlMM+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

45056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

custsat.pdb

msvcrt

??2@YAPAXI@Z ceil free _except_handler3 ??3@YAXPAX@Z malloc _adjust_fdiv _initterm realloc

shlwapi

SHStrDupW wnsprintfA StrCpyNW SHGetValueW SHSetValueW PathFindFileNameW wnsprintfW PathFileExistsW

ole32

CreateStreamOnHGlobal CreateBindCtx StringFromGUID2 CoCreateGuid

oleaut32

SysAllocString SysFreeString

kernel32

RaiseException LocalAlloc LocalReAlloc GetSystemInfo CreateEventA CreateFileMappingA InterlockedCompareExchange SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter SetLastError InterlockedExchange GetSystemDirectoryA GetWindowsDirectoryA GetModuleFileNameA GetModuleHandleA CompareStringA FreeLibrary Sleep FindClose ResetEvent InterlockedDecrement DeleteCriticalSection InitializeCriticalSection GetFileSize GlobalAlloc ReadFile GlobalFree WriteFile VirtualAlloc WaitForSingleObject EnterCriticalSection SetEvent LeaveCriticalSection InterlockedIncrement DisableThreadLibraryCalls LoadLibraryA IsBadWritePtr IsBadCodePtr IsBadReadPtr GetVersionExA LocalFree GetLastError GetSystemTimeAsFileTime CloseHandle SystemTimeToFileTime GetCurrentProcess CompareFileTime UnmapViewOfFile GetSystemTime MapViewOfFile GetTickCount

Sharing

General

Malware Config

Signatures

File Explorer

0b8dcd3ffc4cd765dc58e33a22cee7f2_JaffaCakes118

msvcrt

shlwapi

ole32

oleaut32

kernel32

generic