2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118
Size 125KB
Sample240708-tszgnsxdpp
SHA256 84b94cce3a13951b92ca4914d5a992a7cf192e4ccf29ce3ca87ca991edf04e46
MD5 2cffcbe5f0fab145a2791afe689e7bd8
SHA1 a8dc491c9470847154cf9566a5cac49ed43f6906
SHA512 8ab6f7f1f982ea33473c69af30b2fbf71277f2ff4ceb5808f211bac00b0d757c9e8313ddc337e4ca9ab85abfb97ee21c1eaf06419a6a747c06d93491100e527e
SSDEEP 3072:CiZIYaDxTt5toFqMhNccR6DVMkYyrkGZ:CsIYaD5vIZ4AaIyrkGZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118

File Explorer

2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118

.exe 125KB

2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118

IMPHASH bdd9e75cc0a9610e6a3801a4fb701b12
SHA256 84b94cce3a13951b92ca4914d5a992a7cf192e4ccf29ce3ca87ca991edf04e46
MD5 2cffcbe5f0fab145a2791afe689e7bd8
SHA1 a8dc491c9470847154cf9566a5cac49ed43f6906
SHA512 8ab6f7f1f982ea33473c69af30b2fbf71277f2ff4ceb5808f211bac00b0d757c9e8313ddc337e4ca9ab85abfb97ee21c1eaf06419a6a747c06d93491100e527e
SSDEEP 3072:CiZIYaDxTt5toFqMhNccR6DVMkYyrkGZ:CsIYaD5vIZ4AaIyrkGZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetCurrentProcess GetModuleHandleW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter TerminateProcess LoadLibraryA GetProcAddress GetTickCount ExitProcess CompareStringA GetFileType TlsFree TlsGetValue TlsSetValue GetFileAttributesA TlsAlloc FindFirstFileA FindNextFileA GetModuleHandleA SetFilePointer VirtualFree GetLastError VirtualAlloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf __p__commode _set_fmode __acrt_iob_func

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s _wmakepath_s

api-ms-win-crt-runtime-l1-1-0

_exit exit _initterm_e _initialize_onexit_table _register_onexit_function _register_thread_local_exe_atexit_callback _crt_atexit _controlfp_s terminate _initterm _get_initial_wide_environment _errno _initialize_wide_environment _c_exit _cexit _configure_wide_argv __p___wargv _set_app_type _seh_filter_exe __p___argc __p__wpgmptr

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

user32

DestroyWindow PostQuitMessage GetWindowLongA DefWindowProcA UnhookWindowsHookEx GetMenuItemID GetMessageA TranslateMessage DispatchMessageA RegisterClassA KillTimer SetWindowLongA CallNextHookEx CreateWindowExA DestroyMenu SetTimer

ole32

CoTreatAsClass

oleaut32

SafeArrayAllocDescriptor

advapi32

RegOverridePredefKey CopySid

gdi32

PolylineTo SetDIBits CreateBrushIndirect SetArcDirection SelectObject

Sharing

General

Malware Config

Signatures

File Explorer

2cffcbe5f0fab145a2791afe689e7bd8_JaffaCakes118

kernel32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

user32

ole32

oleaut32

advapi32

gdi32

generic