101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118

General

Target
101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118
Size 212KB
Sample240626-av58fstbne
SHA256 0f6d1d4f17e6e1fd7b09ff9edb2c200260947fa416e79e2590109fd31a6d97bc
MD5 101a3181c82c8b73bf3ac87b594c8a34
SHA1 2d34721285cf19bfc51ae0c0c109301929444cb3
SHA512 25f3dc41cfe1585180ef10da44e16137fcf1916ff02b8b5ea7ec7e7fae86fb63ff3a606e6eda804a2c6b76196113147f363e039753a85170fe4fca3645aa3639
SSDEEP 3072:69kb3B2WXq85Xi+KxtAEyerA9XNh4K2DG+QCiYUMvvZAgBpJSb79V3Sz8LlYcLcs:69kb5a2i+UVRAHzS2u7Pbfy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118

File Explorer

101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118

.exe 212KB

101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118

IMPHASH 7605438d89e09559d7cdc0b3f635908b
SHA256 0f6d1d4f17e6e1fd7b09ff9edb2c200260947fa416e79e2590109fd31a6d97bc
MD5 101a3181c82c8b73bf3ac87b594c8a34
SHA1 2d34721285cf19bfc51ae0c0c109301929444cb3
SHA512 25f3dc41cfe1585180ef10da44e16137fcf1916ff02b8b5ea7ec7e7fae86fb63ff3a606e6eda804a2c6b76196113147f363e039753a85170fe4fca3645aa3639
SSDEEP 3072:69kb3B2WXq85Xi+KxtAEyerA9XNh4K2DG+QCiYUMvvZAgBpJSb79V3Sz8LlYcLcs:69kb5a2i+UVRAHzS2u7Pbfy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

GetTokenInformation OpenProcessToken RegOpenKeyExW

kernel32

GetCurrentProcess GetProcAddress SizeofResource lstrlenW FindResourceExW FindResourceW GetCommandLineW CloseHandle FreeLibrary GetModuleFileNameW RaiseException LoadResource GetModuleHandleW LockResource GetFileAttributesExW VerifyVersionInfoW LoadLibraryExW VerSetConditionMask GetLastError SetLastError LocalAlloc SetStdHandle SetFilePointer InterlockedExchange LoadLibraryA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetVersionExA HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WideCharToMultiByte ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc RtlUnwind Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

101a3181c82c8b73bf3ac87b594c8a34_JaffaCakes118

advapi32

kernel32

ole32

generic