2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118
Size 324KB
Sample240708-pedwla1bpb
SHA256 dae95637854403e0ce2ebcb4516d6c3b1b52f168832c38a28bcc8592e62e7411
MD5 2c4dea346c7a28fbb4a81d298c810694
SHA1 6f0fa76fc631d81c1dc254273bde9c71e9d6935f
SHA512 eef1a0c1b7d911efc0d866f3c8a67a60546af57e5dfcad3537105c120336d7003ef03594a743967c05892e7cd2c40111d86dbbfd1c57c44c67f8df803edcd8c9
SSDEEP 6144:5Sjz0UAzNe1fVIp//hATFecoalpCwUqPdHRMCWWhqF2CnpCG/:oz05e1CRYeor16QhqF2q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118

File Explorer

2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118

.exe 324KB

2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118

IMPHASH ae7b7fdf04a38589704224f2fce8da94
SHA256 dae95637854403e0ce2ebcb4516d6c3b1b52f168832c38a28bcc8592e62e7411
MD5 2c4dea346c7a28fbb4a81d298c810694
SHA1 6f0fa76fc631d81c1dc254273bde9c71e9d6935f
SHA512 eef1a0c1b7d911efc0d866f3c8a67a60546af57e5dfcad3537105c120336d7003ef03594a743967c05892e7cd2c40111d86dbbfd1c57c44c67f8df803edcd8c9
SSDEEP 6144:5Sjz0UAzNe1fVIp//hATFecoalpCwUqPdHRMCWWhqF2CnpCG/:oz05e1CRYeor16QhqF2q
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

PageSetupDlgW LoadAlterBitmap FindTextW GetOpenFileNameW

advapi32

CryptDuplicateKey RegFlushKey AbortSystemShutdownA CryptSetProvParam RegOpenKeyW RegCreateKeyExW RegSaveKeyW CryptGenKey CryptReleaseContext CryptGetDefaultProviderW RegDeleteKeyW CryptGetProvParam

gdi32

GetObjectA GetLogColorSpaceA CreateEllipticRgnIndirect LPtoDP GetRandomRgn SaveDC GdiGetBatchLimit CreateDCA DeleteObject DeleteDC SelectClipRgn GetTextExtentPointW AnimatePalette PolyTextOutA EnumFontFamiliesExA CreateColorSpaceW GetCharacterPlacementW FloodFill GetClipBox FillPath GetDeviceCaps EnumObjects DeviceCapabilitiesExA

comctl32

ImageList_GetBkColor ImageList_LoadImageW CreateMappedBitmap CreateStatusWindowA ImageList_SetDragCursorImage ImageList_DrawIndirect ImageList_AddIcon ImageList_ReplaceIcon ImageList_Replace ImageList_Copy ImageList_GetIcon InitCommonControlsEx ImageList_GetImageRect ImageList_GetFlags CreatePropertySheetPageW ImageList_DrawEx ImageList_SetFilter GetEffectiveClientRect _TrackMouseEvent ImageList_BeginDrag

user32

CreateWindowExA SetParent DefWindowProcW GetClipboardViewer SwapMouseButton DestroyWindow GetClassInfoExW MessageBoxA GetWindowTextA RegisterClassExA RegisterClassA CharToOemBuffW ShowWindow SetDoubleClickTime SetClassLongA

kernel32

GetSystemTime GetDriveTypeA GetEnvironmentStrings GetStringTypeA GetDriveTypeW CompareStringA TlsAlloc HeapAlloc MapViewOfFile TlsFree GetStdHandle InterlockedDecrement GetStringTypeW GetTickCount GetCommandLineW GetModuleHandleA GetStartupInfoA FlushFileBuffers LeaveCriticalSection LoadLibraryA GetVersion LCMapStringA GetModuleFileNameA GetUserDefaultLangID OpenMutexA GetStartupInfoW GetLocalTime GetFileType IsBadWritePtr RtlUnwind SetConsoleScreenBufferSize SetEnvironmentVariableA LCMapStringW InterlockedExchangeAdd InterlockedIncrement OpenEventA GetThreadPriority HeapFree GetSystemTimeAsFileTime GetLogicalDrives WaitForMultipleObjectsEx HeapCreate InitializeCriticalSection SetConsoleActiveScreenBuffer TlsGetValue HeapReAlloc GetCurrentProcessId SetStdHandle GetCurrencyFormatA WideCharToMultiByte TerminateProcess lstrcatW GetCommandLineA GetComputerNameW GetUserDefaultLCID UnhandledExceptionFilter DeleteCriticalSection WriteFile GetCurrentProcess SetFileAttributesW SetHandleCount VirtualAlloc SetLastError GetTimeZoneInformation CloseHandle CreateDirectoryExW FreeEnvironmentStringsA GetCurrentThread AddAtomW GetModuleFileNameW GetCurrentThreadId ExitProcess GetProcAddress ReadFile CreateSemaphoreA CreateMutexA GetProcAddress VirtualQuery GetEnvironmentStringsW QueryPerformanceCounter InterlockedExchange EnterCriticalSection CompareStringW SetFilePointer FreeEnvironmentStringsW HeapDestroy lstrcat VirtualFree GetLastError MultiByteToWideChar TlsSetValue DeleteFileW EnumSystemCodePagesA GetCPInfo

Sharing

General

Malware Config

Signatures

File Explorer

2c4dea346c7a28fbb4a81d298c810694_JaffaCakes118

comdlg32

advapi32

gdi32

comctl32

user32

kernel32

generic