2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118
Size 44KB
Sample240703-qv56fsyfpb
SHA256 c4cbe2ead4ae7e0fe04d61836f4493e708be7d3ea741f3e14310f98efb7acb94
MD5 2287cd3e34cf183cedf7e6f67994e29f
SHA1 87b99fc20ca873386c7907ba81a3ff7c746b47e9
SHA512 4b8b36f7da1eb2f100282a8206721ea00ec91e6854ae595cb2ed6da6a7ae52fbf223e71cb3fc45418153a8a07292dc8b6ec7d0da0b4e77fbe50a17c036fb30ff
SSDEEP 768:h7lAgq30fNHGG0veoq1sBCpouTDdwIBljrkieu3jd3o+//ypB0Ty:h76Leoq1hj5Qir3ji+Vy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118

File Explorer

2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118

.exe 44KB

2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118

IMPHASH b79d5fad93aefd79f3536b75ce32d6b8
SHA256 c4cbe2ead4ae7e0fe04d61836f4493e708be7d3ea741f3e14310f98efb7acb94
MD5 2287cd3e34cf183cedf7e6f67994e29f
SHA1 87b99fc20ca873386c7907ba81a3ff7c746b47e9
SHA512 4b8b36f7da1eb2f100282a8206721ea00ec91e6854ae595cb2ed6da6a7ae52fbf223e71cb3fc45418153a8a07292dc8b6ec7d0da0b4e77fbe50a17c036fb30ff
SSDEEP 768:h7lAgq30fNHGG0veoq1sBCpouTDdwIBljrkieu3jd3o+//ypB0Ty:h76Leoq1hj5Qir3ji+Vy
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncpy _strnicmp strncmp strlen strcmp memmove strcpy strcat memcpy sprintf fclose fabs ceil malloc floor free

kernel32

GetModuleHandleA HeapCreate GetUserDefaultLangID VerLanguageNameA RemoveDirectoryA HeapDestroy ExitProcess GetTempFileNameA FindResourceA LoadResource SizeofResource HeapAlloc HeapFree LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetCommandLineA GetModuleFileNameA GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA WaitForSingleObject EnterCriticalSection LeaveCriticalSection GetExitCodeProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA HeapReAlloc SetLastError TlsAlloc GetCurrentDirectoryA SetCurrentDirectoryA DeleteFileA GetTempPathA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile

comctl32

InitCommonControls InitCommonControlsEx

user32

CharLowerA MessageBoxA SendMessageA GetWindowThreadProcessId IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows DestroyWindow GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongA SetFocus GetWindowTextLengthA GetWindowTextA RedrawWindow GetWindowLongA RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx GetSystemMetrics GetActiveWindow GetWindowRect ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA SetCursorPos LoadImageA SetCursor MapWindowPoints MoveWindow SystemParametersInfoA GetKeyState SetCapture PostMessageA GetCursorPos ReleaseCapture GetFocus GetClientRect FillRect EnumChildWindows DefFrameProcA IsChild GetClassNameA DestroyIcon

gdi32

GetStockObject SetBkColor SetTextColor CreateSolidBrush DeleteObject GetObjectType GetObjectA CreateCompatibleDC GetDIBits DeleteDC CreateDIBSection SelectObject BitBlt CreateBitmap SetPixel

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sharing

General

Malware Config

Signatures

File Explorer

2287cd3e34cf183cedf7e6f67994e29f_JaffaCakes118

msvcrt

kernel32

comctl32

user32

gdi32

ole32

shell32

shlwapi

generic