127aeb2b2915e1737ab57c48e445d682_JaffaCakes118

General

Target
127aeb2b2915e1737ab57c48e445d682_JaffaCakes118
Size 228KB
Sample240626-sxx9qstdjp
SHA256 a3e823d2c1d5008d2f392a7178c32cfdddddc44d6aacabc9f6f47762c5fbd40b
MD5 127aeb2b2915e1737ab57c48e445d682
SHA1 3e044a7f90c56b7964e6dc140cb445e4eab64680
SHA512 f399914189a72176ca46234c2071b48b32a772ab475b76bb795eff58aca4992c4833ee150b30dc5f5b1c7600626f0f7e06f187384d2f34ca3392ff6695bb7843
SSDEEP 3072:Hr5mt+m6dyCBHSq9SkM81VF18nn3e7mKdC7SiNGTf3fifFyaLW/IxcM4yaD:HHbDwq9X11VF1u3e7LdAqPGFy0XxcX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
127aeb2b2915e1737ab57c48e445d682_JaffaCakes118

File Explorer

127aeb2b2915e1737ab57c48e445d682_JaffaCakes118

.exe 228KB

127aeb2b2915e1737ab57c48e445d682_JaffaCakes118

IMPHASH 1b613914fef763447b3ef9b93b0dd07f
SHA256 a3e823d2c1d5008d2f392a7178c32cfdddddc44d6aacabc9f6f47762c5fbd40b
MD5 127aeb2b2915e1737ab57c48e445d682
SHA1 3e044a7f90c56b7964e6dc140cb445e4eab64680
SHA512 f399914189a72176ca46234c2071b48b32a772ab475b76bb795eff58aca4992c4833ee150b30dc5f5b1c7600626f0f7e06f187384d2f34ca3392ff6695bb7843
SSDEEP 3072:Hr5mt+m6dyCBHSq9SkM81VF18nn3e7mKdC7SiNGTf3fifFyaLW/IxcM4yaD:HHbDwq9X11VF1u3e7LdAqPGFy0XxcX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

151552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Source Code\_C++\_Encrypt\Crypter\release\Stub.pdb

user32

MessageBoxA

advapi32

GetUserNameA

kernel32

TlsAlloc GetThreadContext FindResourceA SetThreadContext LoadResource SizeofResource CreateProcessA VirtualProtectEx OpenMutexA LockResource GetModuleFileNameA CreateMutexA WriteProcessMemory ResumeThread GetLastError HeapFree HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection Sleep RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP HeapSize MultiByteToWideChar GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

127aeb2b2915e1737ab57c48e445d682_JaffaCakes118

user32

advapi32

kernel32

generic