2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118

General

Target
2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118
Size 443KB
Sample240704-2rttsstfkp
SHA256 c0d4674f54afb4ac2f25ff97db09eb8e482bdd737ac4ad24d9dae3a4330e35c5
MD5 2684aad68d0f655dd6b5c20fcec97870
SHA1 0cc6042fce3ffbd35516a91feb2e128dff58ebe3
SHA512 c733782e7dfa97b74851ea46e6f57e219346e64bcd5cc3c535efdf5dab41f31e161b5261eb8911b0abddaed2057218139cc01fc5df18905187fd6f0535e23316
SSDEEP 6144:7HYUVVmbHlODshiGB8n4MbF7z3PzMBvoEGiYOICC6lZrRAKNwwMIVT:D3VVmbFOYuxbFXIMcHlZre+weF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118

File Explorer

2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118

.dll 443KB

2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118

IMPHASH 00a57ed18384364b61ee616ce5a449f9
SHA256 c0d4674f54afb4ac2f25ff97db09eb8e482bdd737ac4ad24d9dae3a4330e35c5
MD5 2684aad68d0f655dd6b5c20fcec97870
SHA1 0cc6042fce3ffbd35516a91feb2e128dff58ebe3
SHA512 c733782e7dfa97b74851ea46e6f57e219346e64bcd5cc3c535efdf5dab41f31e161b5261eb8911b0abddaed2057218139cc01fc5df18905187fd6f0535e23316
SSDEEP 6144:7HYUVVmbHlODshiGB8n4MbF7z3PzMBvoEGiYOICC6lZrRAKNwwMIVT:D3VVmbFOYuxbFXIMcHlZre+weF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

173980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\sideBird\brothertest\wifeFish\pay.pdb

kernel32

GetCurrentThread DuplicateHandle PeekNamedPipe GetShortPathNameA GetEnvironmentVariableA ResetEvent FindFirstChangeNotificationA DeleteFileA OpenMutexA CreateMutexA FlushFileBuffers LocalFree LocalAlloc Sleep GetSystemDirectoryA VirtualProtect GetTempPathA SetFileAttributesA GetLastError GetFileAttributesA GetCurrentProcess CloseHandle HeapFree HeapReAlloc HeapAlloc RtlUnwind GetCurrentThreadId GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetStdHandle EnterCriticalSection LeaveCriticalSection GetFileType SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection CreateFileA GetProcAddress GetModuleHandleA WriteFile GetModuleFileNameA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate HeapDestroy VirtualFree VirtualAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW ExitProcess RaiseException HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetFilePointer SetEndOfFile GetProcessHeap ReadFile LoadLibraryA GetLocaleInfoA GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118

kernel32

generic