0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118

General

Target
0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118
Size 170KB
Sample240625-qcb5navbml
SHA256 e0e9b2c08708db4d612eab542b25d89fa9c96737278650b25799c72b394754af
MD5 0e2f6a22fb2c1ee834e3bb94a17fd98e
SHA1 17963e95dc4076646a867ced2923b83b3f4d9391
SHA512 442326bf359037f1433fb391eefdfc048ab46ed3f19109cd8d5318b0e9d43f09bed055cbf28704b92cce7c76b721b62f6bc50546ed3577235428ba8de68e26a3
SSDEEP 3072:+yyL6e5KJOUM8GXLimIm+lLUntmwRYHPesOZUI5upr6rxE:+rWe8oiGUir5tm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118

File Explorer

0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118

.exe 170KB

0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118

IMPHASH c8d30324cefe5db5e19942ce5fe4bb79
SHA256 e0e9b2c08708db4d612eab542b25d89fa9c96737278650b25799c72b394754af
MD5 0e2f6a22fb2c1ee834e3bb94a17fd98e
SHA1 17963e95dc4076646a867ced2923b83b3f4d9391
SHA512 442326bf359037f1433fb391eefdfc048ab46ed3f19109cd8d5318b0e9d43f09bed055cbf28704b92cce7c76b721b62f6bc50546ed3577235428ba8de68e26a3
SSDEEP 3072:+yyL6e5KJOUM8GXLimIm+lLUntmwRYHPesOZUI5upr6rxE:+rWe8oiGUir5tm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6031

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\c4EZ6go5PkFndgG.pdb

kernel32

GetTickCount GetProcAddress LoadLibraryA GetModuleHandleA GetModuleFileNameW lstrlenA DebugBreak GetLastError HeapFree GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP Sleep InitializeCriticalSection RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage HeapSize GetLocaleInfoW CreateFileA CloseHandle FlushFileBuffers GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA RaiseException VirtualQuery

user32

wvsprintfA wsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

0e2f6a22fb2c1ee834e3bb94a17fd98e_JaffaCakes118

kernel32

user32

generic