24050dacced307cf7983b3fac6803b8d_JaffaCakes118

General

Target
24050dacced307cf7983b3fac6803b8d_JaffaCakes118
Size 288KB
Sample240704-avfb2awdnc
SHA256 dbde02e5a1de5c1001535ad5b4bca8b51456ecca506dadcaa2dfaf1dec371119
MD5 24050dacced307cf7983b3fac6803b8d
SHA1 4c6938f4aa89a1437cf6821168256fe7e107e713
SHA512 525818c252905f3c0908e959eb4e6d5564eee9b6a0fcea2bb43cdf4e0ca1ba67136da0a3eef8b037f9e33a02dcabe5a3c207db75caa2a0591ef35243079a6a12
SSDEEP 6144:bxTiwJKptJPPyiNrWDvK4daRhGt34SPU4Q:1TiwJKptJPPyiNrmv9ty
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24050dacced307cf7983b3fac6803b8d_JaffaCakes118

File Explorer

24050dacced307cf7983b3fac6803b8d_JaffaCakes118

.dll 288KB

24050dacced307cf7983b3fac6803b8d_JaffaCakes118

IMPHASH ba95b3a20baf9bcf8a8baeb1d116cb73
SHA256 dbde02e5a1de5c1001535ad5b4bca8b51456ecca506dadcaa2dfaf1dec371119
MD5 24050dacced307cf7983b3fac6803b8d
SHA1 4c6938f4aa89a1437cf6821168256fe7e107e713
SHA512 525818c252905f3c0908e959eb4e6d5564eee9b6a0fcea2bb43cdf4e0ca1ba67136da0a3eef8b037f9e33a02dcabe5a3c207db75caa2a0591ef35243079a6a12
SSDEEP 6144:bxTiwJKptJPPyiNrWDvK4daRhGt34SPU4Q:1TiwJKptJPPyiNrmv9ty
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

90901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateDirectoryW MoveFileW FindFirstFileW FindClose GetProcAddress LoadLibraryW GetLastError MultiByteToWideChar WriteFile ReadFile GetCurrentDirectoryW SetFilePointer SystemTimeToFileTime LocalFileTimeToFileTime GetFileAttributesW WideCharToMultiByte SetEndOfFile CreateFileW lstrcpynW Sleep GetSystemTime SetFileTime WaitForSingleObject FileTimeToSystemTime FileTimeToLocalFileTime FindNextFileW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap RaiseException RtlUnwind GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleFileNameA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetTimeZoneInformation LoadLibraryA InitializeCriticalSection CompareStringA CompareStringW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA

user32

MessageBoxW GetDesktopWindow GetWindow

advapi32

RegOpenKeyExW RegDeleteValueW RegSetValueExW RegQueryValueExW RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

24050dacced307cf7983b3fac6803b8d_JaffaCakes118

kernel32

user32

advapi32

generic