22ffde7443bb0485b7849f416ad1884a_JaffaCakes118

General

Target
22ffde7443bb0485b7849f416ad1884a_JaffaCakes118
Size 712KB
Sample240703-tprmnaygpe
SHA256 d9a841792f06e80076ad2420ea54709feb8b97d7cd39f91b079acbb89278c868
MD5 22ffde7443bb0485b7849f416ad1884a
SHA1 3134aa8774d151b61af95d8b20f20ee53b65acbd
SHA512 15031bcbcd3fea6b16daa44de1a5eea0c6bc586437300eb6e0e4ed34a8fe2a4bf8891a12b3f722ee7e03e57a6e17960dea29e300b52caf5d94435e37f22ec609
SSDEEP 12288:HRFj6hNtXwLWw3SBlnqUtL9+y0w5Mw7eB1xooSGAusOyXEj1DuDSjt:qhNtXwLW0mq+owWw7DolAuhgEj1DuGB
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Molebox Virtualization software 1 IoCs

Detects file using Molebox Virtualization software.

resource	yara_rule
sample	molebox

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ffde7443bb0485b7849f416ad1884a_JaffaCakes118

File Explorer

22ffde7443bb0485b7849f416ad1884a_JaffaCakes118

.exe 712KB

22ffde7443bb0485b7849f416ad1884a_JaffaCakes118

IMPHASH e222b52ce40d7089492a8aca64948746
SHA256 d9a841792f06e80076ad2420ea54709feb8b97d7cd39f91b079acbb89278c868
MD5 22ffde7443bb0485b7849f416ad1884a
SHA1 3134aa8774d151b61af95d8b20f20ee53b65acbd
SHA512 15031bcbcd3fea6b16daa44de1a5eea0c6bc586437300eb6e0e4ed34a8fe2a4bf8891a12b3f722ee7e03e57a6e17960dea29e300b52caf5d94435e37f22ec609
SSDEEP 12288:HRFj6hNtXwLWw3SBlnqUtL9+y0w5Mw7eB1xooSGAusOyXEj1DuDSjt:qhNtXwLW0mq+owWw7DolAuhgEj1DuGB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Molebox Virtualization software

Detects file using Molebox Virtualization software.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddAtomA ExitProcess FindAtomA GetAtomNameA SetUnhandledExceptionFilter

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _assert _cexit _iob _onexit _setmode abort atexit free malloc memcpy memset signal strcpy strlen wcscpy

user32

BringWindowToTop CheckMenuItem CheckMenuRadioItem ClientToScreen CloseClipboard CopyRect CreateAcceleratorTableW CreateDialogIndirectParamW CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DeferWindowPos DestroyAcceleratorTable DestroyCursor DestroyIcon DestroyMenu DrawEdge DrawFocusRect DrawStateW DrawTextW EnableMenuItem EnableWindow EnumClipboardFormats ExitWindowsEx FillRect GetActiveWindow GetCapture GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDesktopWindow GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMenuItemInfoW GetMenuState GetMessagePos GetParent GetSystemMetrics GetUpdateRect GetUpdateRgn GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InflateRect InsertMenuW IsClipboardFormatAvailable IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorFromFileW LoadIconW LoadImageW ModifyMenuW MoveWindow MsgWaitForMultipleObjects OffsetRect OpenClipboard PostQuitMessage PtInRect RedrawWindow RegisterClipboardFormatW RegisterHotKey ReleaseCapture ReleaseDC RemoveMenu ScreenToClient ScrollWindow SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowCaret ShowCursor SystemParametersInfoW TranslateAcceleratorW TranslateMessage UnionRect UnregisterHotKey UpdateWindow WindowFromPoint

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

22ffde7443bb0485b7849f416ad1884a_JaffaCakes118

kernel32

msvcrt

user32

generic