141f1868f44ea60a617b266f43514737_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
141f1868f44ea60a617b266f43514737_JaffaCakes118
Size 398KB
Sample240627-bfa97sxalm
SHA256 c30c41b279ffea14b4df02f597b9acb37190ee707e92586d716ffae1267f79ea
MD5 141f1868f44ea60a617b266f43514737
SHA1 d2453478e8d1b2083a0bacf563fbd508ee43f982
SHA512 21da15c3bcfa36dad53b554927fc373eb937ebf51733d53747ef5fcc1078c36966500eab6ea06071b2798a73d9ca1886c277317dc73a3c623e440756cdc5ac1b
SSDEEP 6144:phlE9IW+WQyKL8ze3i8VGTfLAfgMii/Q6tby:3HmP2bVE4FY6tby
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141f1868f44ea60a617b266f43514737_JaffaCakes118

File Explorer

141f1868f44ea60a617b266f43514737_JaffaCakes118

.dll 398KB

141f1868f44ea60a617b266f43514737_JaffaCakes118

IMPHASH 8f5142adfbc08dca9cb58adf528ee514
SHA256 c30c41b279ffea14b4df02f597b9acb37190ee707e92586d716ffae1267f79ea
MD5 141f1868f44ea60a617b266f43514737
SHA1 d2453478e8d1b2083a0bacf563fbd508ee43f982
SHA512 21da15c3bcfa36dad53b554927fc373eb937ebf51733d53747ef5fcc1078c36966500eab6ea06071b2798a73d9ca1886c277317dc73a3c623e440756cdc5ac1b
SSDEEP 6144:phlE9IW+WQyKL8ze3i8VGTfLAfgMii/Q6tby:3HmP2bVE4FY6tby
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

249856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

jsprofilerui.pdb

kernel32

CloseHandle WriteFile CreateFileW WideCharToMultiByte DeleteFileW GetEnvironmentVariableW HeapAlloc GetProcessHeap HeapFree lstrcmpW GetVersionExA HeapDestroy HeapReAlloc HeapSize GetProcAddress LoadLibraryA VirtualFree VirtualAlloc GetCommandLineA RtlUnwind VirtualProtect GetSystemInfo VirtualQuery GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InterlockedDecrement UnhandledExceptionFilter SetUnhandledExceptionFilter GetTempFileNameW OutputDebugStringA GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers InterlockedIncrement GetEnvironmentVariableA GetCurrentThreadId GetCurrentProcess GetLastError LeaveCriticalSection LoadLibraryW SearchPathW GetUserDefaultUILanguage GetSystemDefaultUILanguage UnmapViewOfFile CreateFileMappingW MapViewOfFile CreateActCtxW ReleaseActCtx ActivateActCtx DeactivateActCtx InterlockedCompareExchange EnterCriticalSection lstrlenW DeleteCriticalSection InitializeCriticalSection FlushInstructionCache FindResourceExW LockResource GlobalAlloc GlobalLock GlobalFree SetLastError GlobalUnlock GetNumberFormatW GetLocaleInfoW GetModuleHandleW LoadLibraryExW FindResourceW LoadResource SizeofResource MultiByteToWideChar FreeLibrary lstrcmpiW RaiseException InterlockedExchange GetVersionExW TerminateProcess GetModuleFileNameW

user32

DestroyMenu PostMessageW GetKeyState DrawTextW GetDlgItem GetSysColor GetWindowLongA DrawEdge GetMessagePos SetScrollInfo GetScrollPos SetScrollPos UnregisterClassA TrackPopupMenuEx GetMenuItemCount DeleteMenu CheckMenuRadioItem CreatePopupMenu AppendMenuW EnableMenuItem CheckMenuItem EndPaint BeginPaint PtInRect ReleaseCapture GetCapture SystemParametersInfoW GetDlgCtrlID SetCapture KillTimer SetTimer InvalidateRect UpdateWindow ClientToScreen RegisterClassExW GetSystemMetrics InflateRect SetRect GetCursorPos SetWindowTextW GetFocus DrawFocusRect LoadCursorW GetClassInfoExW AdjustWindowRectEx IsWindowEnabled ScreenToClient SetWindowPos GetMenu CreateWindowExW GetWindowLongW CallWindowProcW DefWindowProcW GetDC FillRect ReleaseDC LoadAcceleratorsW DestroyAcceleratorTable SetFocus EnableWindow IsWindowVisible TranslateAcceleratorW CreateDialogParamW IsWindow SetWindowLongW ShowWindow GetClientRect GetParent MoveWindow DestroyWindow GetSysColorBrush GetWindowRect SendMessageW OpenClipboard EmptyClipboard CloseClipboard SetClipboardData MessageBoxW LoadStringW CharNextW LoadImageW SetDlgItemTextW

ole32

CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc

oleaut32

SysAllocStringLen VarR8FromStr SysAllocString VarUI4FromStr VariantChangeType SysFreeString VariantClear VariantCopy VariantInit

oleacc

LresultFromObject CreateStdAccessibleObject

advapi32

RegSetValueExW RegEnumKeyExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegQueryInfoKeyW

gdi32

GetStockObject DeleteObject DeleteDC SetBkColor GetTextExtentExPointW SetTextAlign ExtTextOutW SetBkMode SetTextColor SetLayout BitBlt CreateSolidBrush SelectObject CreateCompatibleBitmap CreateCompatibleDC GetTextExtentPoint32W GetObjectW GetDeviceCaps GetTextExtentPointW

shlwapi

ord437 ord219

urlmon

ord423

iertutil

ord70 ord65 ord64 ord68 ord61 ord650

Sharing

General

Malware Config

Signatures

File Explorer

141f1868f44ea60a617b266f43514737_JaffaCakes118

kernel32

user32

ole32

oleaut32

oleacc

advapi32

gdi32

shlwapi

urlmon

iertutil

generic