0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118
Size 83KB
Sample240625-j2pcys1flk
SHA256 a21ace89c2f550fe7311364dc3756eec7bdf7e05fbcd9667b41806f42684f2ca
MD5 0d53faf67cee4389d61bda48234c9e3b
SHA1 cda0d2b4044b3eeaea76e98ebac838df36da1c34
SHA512 1fb29f49cd14d6b85e3ef71fd06949c789e9e7724cc088b66a8d511cab5c3ee4ea306ef6c1aa611a4e3cb546d33473b0ce44e640ae0ac5592fd6e2ac80a59a6a
SSDEEP 1536:/+FDoKBniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZi:/+FDPK71QkbstyJjCKICpC72s/mlaXi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118

File Explorer

0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118

.exe 83KB

0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118

IMPHASH ddbb90ebf41500dde8a2155d2d44be6d
SHA256 a21ace89c2f550fe7311364dc3756eec7bdf7e05fbcd9667b41806f42684f2ca
MD5 0d53faf67cee4389d61bda48234c9e3b
SHA1 cda0d2b4044b3eeaea76e98ebac838df36da1c34
SHA512 1fb29f49cd14d6b85e3ef71fd06949c789e9e7724cc088b66a8d511cab5c3ee4ea306ef6c1aa611a4e3cb546d33473b0ce44e640ae0ac5592fd6e2ac80a59a6a
SSDEEP 1536:/+FDoKBniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZi:/+FDPK71QkbstyJjCKICpC72s/mlaXi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4540

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantChangeTypeEx SysStringLen SysAllocStringLen VariantCopyInd VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegCloseKey OpenProcessToken RegOpenKeyExA LookupPrivilegeValueA

kernel32

SetCommConfig CreateFileA CloseHandle FindResourceA Sleep DeleteFileA VirtualFree SetFilePointer SetErrorMode GetSystemInfo RemoveDirectoryA ReadFile GetUserDefaultLangID OutputDebugStringA GetEnvironmentVariableA GetWindowsDirectoryA GetLocaleInfoA LoadLibraryA GetACP LockResource GetFileSize FormatMessageA FlushViewOfFile GetExitCodeProcess GetFullPathNameA GetLastError GetSystemDefaultLCID SetEndOfFile GetFileAttributesA LoadResource VirtualQuery GetCurrentProcess SizeofResource GetProcAddress GetVersionExA GetModuleHandleA GetCommandLineA GetModuleFileNameA IsDBCSLeadByte CreateProcessA VirtualProtect CreateDirectoryA VirtualAlloc InterlockedExchange WriteFile ReadFile GetCommandLineA GetModuleHandleA GetLastError GetStdHandle CreateFileA GetFileSize ExitProcess WideCharToMultiByte LocalAlloc TlsSetValue VirtualAlloc LocalFree WriteFile LeaveCriticalSection GetFileType SetEndOfFile TlsGetValue SetFilePointer CloseHandle VirtualFree MultiByteToWideChar GetSystemTime RaiseException EnterCriticalSection DeleteCriticalSection

user32

MessageBoxA SetWindowLongA CharPrevA ExitWindowsEx TranslateMessage MsgWaitForMultipleObjects LoadStringA CallWindowProcA DestroyWindow CreateWindowExA PeekMessageA DispatchMessageA

Sharing

General

Malware Config

Signatures

File Explorer

0d53faf67cee4389d61bda48234c9e3b_JaffaCakes118

oleaut32

version

advapi32

kernel32

user32

generic