202fb69734e0eb9213156f79bcbe79cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
202fb69734e0eb9213156f79bcbe79cd_JaffaCakes118
Size 136KB
Sample240702-vxtbwstane
SHA256 1b1d08ba5c9ab42ea4473383c30651c7283aca95e6bde0aa6c613a4eb9ba014b
MD5 202fb69734e0eb9213156f79bcbe79cd
SHA1 ee8bc656418710f738b4ef1bb565d4e3df21b27a
SHA512 920e1bbf1a2e1cc6d80a8123e209ac7e60a8e5fb6defc2dfa55dde85f930559e655586a047838e059fe301bd3c33307e97a30efcb80e830a1143ddec74cfbf0a
SSDEEP 3072:hvTW661letEoocz4plCCCf30z+Co5wJ3g9:hvTa6EooXCCCfkz+CD
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

202fb69734e0eb9213156f79bcbe79cd_JaffaCakes118

.exe 136KB

202fb69734e0eb9213156f79bcbe79cd_JaffaCakes118

IMPHASH 0484e9827e9bbd4e9dc1d70ac883a373
SHA256 1b1d08ba5c9ab42ea4473383c30651c7283aca95e6bde0aa6c613a4eb9ba014b
MD5 202fb69734e0eb9213156f79bcbe79cd
SHA1 ee8bc656418710f738b4ef1bb565d4e3df21b27a
SHA512 920e1bbf1a2e1cc6d80a8123e209ac7e60a8e5fb6defc2dfa55dde85f930559e655586a047838e059fe301bd3c33307e97a30efcb80e830a1143ddec74cfbf0a
SSDEEP 3072:hvTW661letEoocz4plCCCf30z+Co5wJ3g9:hvTa6EooXCCCfkz+CD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

51:e2:88:30:fe:ed:af:74:ed:ea:22:22:5c:ae:8b:fc:a5:3d:9d:04:cb:a7:30:70:21:80:c4:75:c6:1c:58:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=DAEOTLIWKIKZFJMDIS

Chains

May 9, 2019

Minor OS version

Major OS version

Entry point

5216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetOEMCP GetPrivateProfileStringA GetProcessHeap GetProcessIoCounters GetShortPathNameA GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemDirectoryA GetSystemDirectoryW GetSystemTime GetSystemTimeAsFileTime GetTempFileNameA GetTempPathA GetTickCount GetVersion GetVersionExA GetVersionExW GetVolumeInformationW GetWindowsDirectoryA GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InterlockedCompareExchange InterlockedDecrement InterlockedIncrement IsDebuggerPresent IsValidCodePage LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryW LocalAlloc LocalFileTimeToFileTime GetModuleHandleA MoveFileA MulDiv MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleInputW ReadFile ReleaseSemaphore RemoveDirectoryA RtlUnwind SearchPathA SetConsoleMode SetCurrentDirectoryA SetErrorMode SetFileAttributesA SetFilePointer SetFileTime SetHandleCount SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile WritePrivateProfileStringA lstrcatA lstrcatW lstrcmpA lstrcmpW lstrcmpiA lstrcpyW lstrcpynA lstrcpynW lstrlenA lstrlenW GetModuleFileNameW GetModuleFileNameA GetLocaleInfoA GetLastError GetFullPathNameA GetFileType GetFileSize GetFileAttributesW GetFileAttributesA GetExitCodeProcess GetEnvironmentStringsW GetEnvironmentStrings GetDriveTypeW GetDiskFreeSpaceW GetDiskFreeSpaceA GetCurrentThreadId GetCurrentProcessId GetCurrentProcess GetConsoleScreenBufferInfo GetConsoleOutputCP GetConsoleMode GetConsoleCP GetCommandLineW GetCommandLineA GetCPInfo GetACP FreeLibrary FreeEnvironmentStringsW FreeEnvironmentStringsA FormatMessageW FlushFileBuffers FindNextFileW FindNextFileA FindFirstFileW FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsA ExitProcess EnterCriticalSection DosDateTimeToFileTime DeviceIoControl DeleteFileW DeleteFileA DeleteCriticalSection CreateThread CreateProcessA CreateMutexW CreateJobObjectW CreateFileW CreateFileA CreateEventW CreateDirectoryA CopyFileA CompareFileTime CloseHandle VirtualAllocEx LoadLibraryA LocalFree GetProcAddress

user32

IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadKeyboardLayoutW LoadStringW LookupIconIdFromDirectory MapDialogRect MessageBoxW MoveWindow MsgWaitForMultipleObjects OemToCharA OffsetRect OpenWindowStationA PostMessageA PostMessageW PostQuitMessage PostThreadMessageA RegisterClassExW RegisterHotKey RegisterWindowMessageW ReleaseDC RemovePropA ReuseDDElParam ScreenToClient ScrollDC SendInput SendMessageA SendMessageCallbackA SendMessageTimeoutA SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetCursorPos SetDlgItemTextW SetFocus SetForegroundWindow SetParent SetPropA SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW ShowOwnedPopups ShowWindow SystemParametersInfoW TabbedTextOutA TranslateAcceleratorW TranslateMessage UpdateWindow WaitForInputIdle wsprintfW wvsprintfA IsWindowEnabled IsWindow IsIconic IsDlgButtonChecked IsCharAlphaNumericW InvalidateRect InflateRect ImpersonateDdeClientWindow IMPQueryIMEA GetWindowThreadProcessId GetWindowTextW GetWindowTextLengthW GetWindowRect GetWindowPlacement GetWindowLongW GetWindow GetUserObjectInformationW GetTopWindow GetThreadDesktop GetSystemMetrics GetSystemMenu GetPropA GetParent GetMessageW GetMenuInfo GetMenu GetKeyState GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDC GetClipboardFormatNameA GetClientRect GetClassWord GetClassNameA GetClassLongW GetAsyncKeyState GetActiveWindow FrameRect FindWindowW FindWindowExA EnumWindows EnumThreadWindows EnumDisplaySettingsW EnumDisplayDevicesW EnumDesktopWindows EndPaint EndDialog EnableWindow EnableMenuItem DrawTextW DrawFrameControl DrawFocusRect DispatchMessageW DialogBoxParamW DestroyWindow DestroyIcon DefWindowProcW DefDlgProcW DdeGetData CreateWindowExW CreatePopupMenu CreateMDIWindowA CreateDesktopA ChildWindowFromPointEx CheckDlgButton CharUpperW CharUpperBuffW CharLowerW ChangeDisplaySettingsExW CascadeChildWindows CallMsgFilter BeginPaint AttachThreadInput AdjustWindowRectEx AnimateWindow FindWindowExW

gdi32

ExtCreatePen FONTOBJ_pifi FlattenPath GdiConvertBitmap GdiConvertToDevmodeW GetCharacterPlacementA GetDIBits GetDeviceCaps GetDeviceGammaRamp GetObjectA GetObjectW GetPixel GetStockObject GetTextExtentPoint32W GetTextExtentPointA GetTextExtentPointW GetTextFaceW LineTo EudcLoadLinkW PolyDraw EngEraseSurface RectInRegion Rectangle RestoreDC RoundRect SaveDC SelectObject SetBkColor SetBkMode SetDIBits SetPixel SetTextColor SetViewportOrgEx StretchBlt StrokeAndFillPath StrokePath cGetTTFFromFOT EngReleaseSemaphore MoveToEx AngleArc EndPath Ellipse DescribePixelFormat DeleteObject DeleteDC CreateSolidBrush CreatePen CreateFontW CreateFontIndirectW CreateFontIndirectA CreateEllipticRgn CreateDCW CreateCompatibleDC CreateCompatibleBitmap CloseFigure BeginPath EngQueryLocalTime

advapi32

RegQueryValueExA RegOpenKeyA

shell32

WOWShellExecute Shell_NotifyIconW ShellExecuteW ShellAboutA SHGetPathFromIDListA SHGetFolderPathA SHGetDesktopFolder SHGetDataFromIDListW SHFormatDrive SHFileOperation SHCreateDirectoryExW FindExecutableA ExtractAssociatedIconA

ole32

CoTaskMemFree CoUninitialize CreateStreamOnHGlobal GetHGlobalFromStream OleUninitialize CoCreateInstance CoCreateGuid CoInitialize

shlwapi

StrRStrIW StrCmpNIA

Sharing

General

Malware Config

Signatures

File Explorer

202fb69734e0eb9213156f79bcbe79cd_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

generic