369b7f692258f09148e7a2a30d606c2d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
369b7f692258f09148e7a2a30d606c2d_JaffaCakes118
Size 728KB
Sample240710-15lvnsshjn
SHA256 2359369091a9a7fb914bf4321268de4a2c2126f883f5cdc6aa0ad2270073696e
MD5 369b7f692258f09148e7a2a30d606c2d
SHA1 5faca30857e892a8854bb3421fc5ba65942bbd8a
SHA512 f67448de79e09b50479adb68de38bd85a99684651eeb831c43dde43b229e9974bb279e6b8837a66b0269420326a8b866e164e2b2ed960a1e93eebe463601fea7
SSDEEP 12288:lEcF8D2K53tGcAOYYsLN2Z8bbX8/meGDgGeItoEc9GspWZhASRXHYnrmL:lEc8H5fMLN2Kb78rGlFtov9GsqRXHYrE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

369b7f692258f09148e7a2a30d606c2d_JaffaCakes118

.exe 728KB

369b7f692258f09148e7a2a30d606c2d_JaffaCakes118

IMPHASH 448080862aa46603a8894fb56d313eae
SHA256 2359369091a9a7fb914bf4321268de4a2c2126f883f5cdc6aa0ad2270073696e
MD5 369b7f692258f09148e7a2a30d606c2d
SHA1 5faca30857e892a8854bb3421fc5ba65942bbd8a
SHA512 f67448de79e09b50479adb68de38bd85a99684651eeb831c43dde43b229e9974bb279e6b8837a66b0269420326a8b866e164e2b2ed960a1e93eebe463601fea7
SSDEEP 12288:lEcF8D2K53tGcAOYYsLN2Z8bbX8/meGDgGeItoEc9GspWZhASRXHYnrmL:lEc8H5fMLN2Kb78rGlFtov9GsqRXHYrE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

4740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontA CreateFontIndirectA CreateSolidBrush DeleteDC DeleteObject GetStockObject PatBlt SelectObject SetBkColor SetBkMode SetTextColor

kernel32

AddAtomA CloseHandle CreateMutexA CreateSemaphoreA CreateThread DeleteCriticalSection EnterCriticalSection ExitProcess ExitThread FindAtomA FindResourceA GetAtomNameA GetCommandLineA GetCurrentThreadId GetFileAttributesA GetLastError GetLocaleInfoA GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemDefaultLCID GetTempPathA GetVersionExA GlobalAlloc GlobalFree GlobalLock GlobalUnlock InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsDBCSLeadByteEx LeaveCriticalSection LoadResource LockResource MultiByteToWideChar ReleaseMutex ReleaseSemaphore SetLastError SetUnhandledExceptionFilter SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

_close _fdopen _open _read _write __getmainargs __mb_cur_max __p__environ __p__fmode __set_app_type _assert _cexit _errno _fstati64 _iob _lseeki64 _onexit _setmode abort atexit atoi calloc fclose fflush fopen fputc fputs free fwrite getenv iswctype localeconv malloc memchr memmove printf realloc setlocale setvbuf signal sprintf strchr strcmp strcoll strcpy strerror strftime strncpy strrchr strtok strxfrm tolower towlower towupper vfprintf wcscoll wcsftime wcslen wcsxfrm

ole32

CreateStreamOnHGlobal

shell32

SHBrowseForFolderA SHGetFolderPathA SHGetPathFromIDListA ShellExecuteA ShellExecuteExA

user32

BeginPaint ClientToScreen CreateWindowExA DefWindowProcA DestroyWindow DispatchMessageA EnableWindow EndPaint GetCapture GetDC GetMessageA GetSystemMetrics GetWindowRect LoadCursorA LoadIconA MessageBoxA MessageBoxExA PostQuitMessage RedrawWindow RegisterClassExA ReleaseCapture ReleaseDC ScreenToClient SendMessageA SetCapture SetCursor SetTimer SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage

wininet

HttpOpenRequestA HttpQueryInfoA HttpSendRequestA InternetAttemptConnect InternetCloseHandle InternetConnectA InternetOpenA InternetOpenUrlA InternetReadFile

gdiplus

GdipAlloc GdipCloneImage GdipCreateBitmapFromStream GdipCreateFromHDC GdipDeleteGraphics GdipDisposeImage GdipDrawImageI GdipFree GdiplusShutdown GdiplusStartup

Name

.text

Size

475KB

Virtual Size

475KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

208KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

369b7f692258f09148e7a2a30d606c2d_JaffaCakes118

PE Signature issue

advapi32

gdi32

kernel32

msvcrt

ole32

shell32

user32

wininet

gdiplus

generic