2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118
Size 113KB
Sample240708-e6am5svcjc
SHA256 b19f6479cd08886946e3e33ee0e11f20e5efc6ce8a0273161ae819b04e979712
MD5 2afd5eb174e59d4625640fe9cf334a01
SHA1 4779efac73052e197922604a170fcc6889d38f77
SHA512 aff0dfeb1745630661cfce367963bf5a20653e1e1dac3084c0b633d8b8284e46677fa76359af0d13714c06bcaff3339bbbd65a9592b6c20ce5335089578ea41e
SSDEEP 3072:O8Zc0hTH53F/y0nzTd6UjIWVvn+ovkizy/XI:+0XXzxHhvuizy/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118

File Explorer

2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118

.exe 113KB

2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118

IMPHASH 1e03d117f63096a8bda81dae8d1f44b3
SHA256 b19f6479cd08886946e3e33ee0e11f20e5efc6ce8a0273161ae819b04e979712
MD5 2afd5eb174e59d4625640fe9cf334a01
SHA1 4779efac73052e197922604a170fcc6889d38f77
SHA512 aff0dfeb1745630661cfce367963bf5a20653e1e1dac3084c0b633d8b8284e46677fa76359af0d13714c06bcaff3339bbbd65a9592b6c20ce5335089578ea41e
SSDEEP 3072:O8Zc0hTH53F/y0nzTd6UjIWVvn+ovkizy/XI:+0XXzxHhvuizy/
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

211676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetDesktopWindow DestroyWindow SetRect GetWindowRect EndDialog LoadBitmapA GetParent SetDlgItemTextA EnableWindow GetDlgItemTextA CharNextA IsWindowVisible DrawTextA ScreenToClient CreateDialogParamA GetWindowTextA SystemParametersInfoA PostQuitMessage LoadIconA SetClassLongA SendDlgItemMessageA CharPrevA SetWindowPos BeginPaint EndPaint LoadCursorA RegisterClassA GetClientRect GetDlgItem FillRect

ole32

OleInitialize OleUninitialize CoCreateInstance

shlwapi

PathFileExistsW PathRemoveBackslashA SHDeleteValueA

gdi32

GetClipRgn SetTextColor SelectObject CreatePen CreateRectRgn OffsetClipRgn IntersectClipRect GetStockObject GetNearestColor SetBkColor

urlmon

CreateURLMoniker

kernel32

GetFileAttributesA GetVersionExA FileTimeToSystemTime SetStdHandle GetEnvironmentVariableA InitializeCriticalSection FindFirstFileA LeaveCriticalSection FindClose lstrlenA FindVolumeClose FindNextFileA LoadLibraryA GetFileType CompareStringA VirtualAlloc SetConsoleCtrlHandler SetConsoleMode FileTimeToLocalFileTime LCMapStringA lstrcmpiA HeapCreate GetUserDefaultLCID GetShortPathNameA WideCharToMultiByte GetModuleFileNameA InterlockedExchange GetLocaleInfoA GetStringTypeA GetStdHandle GetProcessHeap SetVolumeLabelA GetFileTime GetVolumeInformationA LocalUnlock IsValidCodePage GetTimeZoneInformation GetLocaleInfoW GetStartupInfoA GetStringTypeW GetLocalTime GetFullPathNameA GetConsoleScreenBufferInfo GetModuleHandleExW IsValidLocale GetConsoleMode HeapFree CreateFileA VirtualFree EnumSystemLocalesA SetHandleCount ExitProcess SetEnvironmentVariableA GetCurrentProcess FlushFileBuffers HeapDestroy ReleaseMutex GetDriveTypeA GetDriveTypeA SetThreadPriorityBoost GetProcAddress CreateMutexA HeapAlloc LCMapStringW lstrcpynA GetModuleHandleA CompareStringW SetupComm GetSystemTime

shell32

ExtractIconExA SHGetSpecialFolderPathW ShellExecuteExA

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text1

Size

95KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pfnioma

Size

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

whzighx

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2afd5eb174e59d4625640fe9cf334a01_JaffaCakes118

user32

ole32

shlwapi

gdi32

urlmon

kernel32

shell32

generic