1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118

General

Target
1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118
Size 760KB
Sample240626-jslwgateqe
SHA256 c9e65e776ddd381ef2aad1b1ec44235f090c5fc34ee6e7e546eb9943a3e1ff3d
MD5 1142c3701c716100cb437a8ccaa6f0dc
SHA1 1beaf918b8f4079ca25c0c3fc18a5a006bac6482
SHA512 8acd8f3f732b1b8d1d672f1524379d65c3de86df77e510c86f9ecec72ce54c39af05dcb5d84cee89d19a7945d3556e5d9438adbdcd03d600766a89fc189b5a88
SSDEEP 12288:hRFj6OM5QNciSK1uH4CR57nkQZ0QO/ggYq9juUt/3L6+6r//eFX2EZ+SL+Qkmq:E55uWKcLf7kQi/tYG93L6N//U2EviQkz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118

File Explorer

1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118

.exe 760KB

1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118

IMPHASH e222b52ce40d7089492a8aca64948746
SHA256 c9e65e776ddd381ef2aad1b1ec44235f090c5fc34ee6e7e546eb9943a3e1ff3d
MD5 1142c3701c716100cb437a8ccaa6f0dc
SHA1 1beaf918b8f4079ca25c0c3fc18a5a006bac6482
SHA512 8acd8f3f732b1b8d1d672f1524379d65c3de86df77e510c86f9ecec72ce54c39af05dcb5d84cee89d19a7945d3556e5d9438adbdcd03d600766a89fc189b5a88
SSDEEP 12288:hRFj6OM5QNciSK1uH4CR57nkQZ0QO/ggYq9juUt/3L6+6r//eFX2EZ+SL+Qkmq:E55uWKcLf7kQi/tYG93L6N//U2EviQkz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddAtomA ExitProcess FindAtomA GetAtomNameA SetUnhandledExceptionFilter

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _assert _cexit _iob _onexit _setmode abort atexit free malloc memcpy memset signal strcpy strlen wcscpy

user32

BringWindowToTop CheckMenuItem CheckMenuRadioItem ClientToScreen CloseClipboard CopyRect CreateAcceleratorTableW CreateDialogIndirectParamW CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DeferWindowPos DestroyAcceleratorTable DestroyCursor DestroyIcon DestroyMenu DrawEdge DrawFocusRect DrawStateW DrawTextW EnableMenuItem EnableWindow EnumClipboardFormats ExitWindowsEx FillRect GetActiveWindow GetCapture GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDesktopWindow GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMenuItemInfoW GetMenuState GetMessagePos GetParent GetSystemMetrics GetUpdateRect GetUpdateRgn GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InflateRect InsertMenuW IsClipboardFormatAvailable IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorFromFileW LoadIconW LoadImageW ModifyMenuW MoveWindow MsgWaitForMultipleObjects OffsetRect OpenClipboard PostQuitMessage PtInRect RedrawWindow RegisterClipboardFormatW RegisterHotKey ReleaseCapture ReleaseDC RemoveMenu ScreenToClient ScrollWindow SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowCaret ShowCursor SystemParametersInfoW TranslateAcceleratorW TranslateMessage UnionRect UnregisterHotKey UpdateWindow WindowFromPoint

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

820KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1142c3701c716100cb437a8ccaa6f0dc_JaffaCakes118

kernel32

msvcrt

user32

generic