2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118
Size 255KB
Sample240704-dh3tca1cql
SHA256 11570785bbd1516c9691ad7711f26dd49df0601681fc8e5211c5f7fc6c512aa3
MD5 2467dbadbf42af0ece1b37c22e6cf274
SHA1 ab7c07cc16a292ba0154201b5be4d2165291bf60
SHA512 53dd701bbe6fb7e0756ab35577a88df243467f2db55c16e56dff644cc8b3743fba4fda172054e6d5ca16d00687cc0c5ca749c47133517ad9de07042a1b2a5c54
SSDEEP 6144:2N4mFIc6EQppwc8+K0bEhBd5yZnGDhT32r8j2eA8H:kFXTQXBVQhBdQZnihT3alE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118

File Explorer

2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118

.dll 255KB

2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118

IMPHASH 0ac1d0ce2198763012ee83eedcd78811
SHA256 11570785bbd1516c9691ad7711f26dd49df0601681fc8e5211c5f7fc6c512aa3
MD5 2467dbadbf42af0ece1b37c22e6cf274
SHA1 ab7c07cc16a292ba0154201b5be4d2165291bf60
SHA512 53dd701bbe6fb7e0756ab35577a88df243467f2db55c16e56dff644cc8b3743fba4fda172054e6d5ca16d00687cc0c5ca749c47133517ad9de07042a1b2a5c54
SSDEEP 6144:2N4mFIc6EQppwc8+K0bEhBd5yZnGDhT32r8j2eA8H:kFXTQXBVQhBdQZnihT3alE
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5957

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle ExitProcess FindFirstFileExW FreeEnvironmentStringsW GetCPInfoExW GetCommMask GetCommState GetDefaultCommConfigW GetFileSize GetLargestConsoleWindowSize GetModuleFileNameA GetNextVDMCommand GetPrivateProfileStructW GetStringTypeW GetSystemInfo GetVDMCurrentDirectories GetWindowsDirectoryA GlobalLock GlobalSize GlobalUnfix Heap32Next HeapCompact LCMapStringW LocalFlags MoveFileA MultiByteToWideChar OpenSemaphoreA QueryPerformanceFrequency ReadConsoleOutputCharacterA RegisterConsoleVDM ScrollConsoleScreenBufferA SetConsoleInputExeNameA Sleep SwitchToFiber UnhandledExceptionFilter VirtualFree VirtualProtect WriteConsoleInputW WriteConsoleOutputCharacterA WritePrivateProfileStringA _lopen lstrcmpA lstrcmpiA

user32

ActivateKeyboardLayout AdjustWindowRect BroadcastSystemMessageW CharLowerBuffA CheckDlgButton CreateAcceleratorTableW CreateDesktopA CreateDialogIndirectParamW EnumWindowStationsW GetClassWord GetComboBoxInfo GetMenuState GetNextDlgTabItem GetShellWindow IsCharAlphaNumericW LoadAcceleratorsW OemToCharBuffA OpenIcon SetMenuItemInfoW SetSystemCursor ShowScrollBar ToUnicodeEx TrackPopupMenu WinHelpW

gdi32

CreateSolidBrush EndPath GdiComment GdiGetBatchLimit GetClipBox GetClipRgn GetMetaRgn GetPixel GetPixelFormat GetRgnBox GetTextCharsetInfo GetTextFaceA GetTextFaceW PolylineTo SaveDC SelectObject SetBitmapDimensionEx SetPixelFormat SetStretchBltMode SetTextJustification

comdlg32

GetOpenFileNameW PrintDlgW

msvcrt

_callnewh _chdir _copysign _execvpe _flsbuf _getdcwd _getsystime _heapused _spawnve _strdate _unlink _wexecle fopen putwc strspn swprintf

Sharing

General

Malware Config

Signatures

File Explorer

2467dbadbf42af0ece1b37c22e6cf274_JaffaCakes118

kernel32

user32

gdi32

comdlg32

msvcrt

generic