3a69308fc69a181472bba584c49bf276_JaffaCakes118

General

Target
3a69308fc69a181472bba584c49bf276_JaffaCakes118
Size 185KB
Sample240711-xym8dazfql
SHA256 b3b830308f3c2f3212d528ea6622c19769f8469d34d23939cdbc9c3548661d95
MD5 3a69308fc69a181472bba584c49bf276
SHA1 70a4c032225b763ded2b241934a02059599bbee5
SHA512 2b71c67e442d9dbbc0dbec213a9681f5198a2b708853b8a7b216357a8cbeb6c80fb1485056b4fe7605cef056796c0391f3b51e549b78caef112920e04e55b432
SSDEEP 3072:T3YFRQ2tC/SGI2iF1F8uWLyTF0vPdN1tpt+AHW0qhPW8tI21EjLKREHci+siVv8T:r8RQ2t8S/x8ufR0vPdrtp9H3qoN21EjD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a69308fc69a181472bba584c49bf276_JaffaCakes118

File Explorer

3a69308fc69a181472bba584c49bf276_JaffaCakes118

.exe 185KB

3a69308fc69a181472bba584c49bf276_JaffaCakes118

IMPHASH 2ef5f9f64374f8f57658bcd584e265be
SHA256 b3b830308f3c2f3212d528ea6622c19769f8469d34d23939cdbc9c3548661d95
MD5 3a69308fc69a181472bba584c49bf276
SHA1 70a4c032225b763ded2b241934a02059599bbee5
SHA512 2b71c67e442d9dbbc0dbec213a9681f5198a2b708853b8a7b216357a8cbeb6c80fb1485056b4fe7605cef056796c0391f3b51e549b78caef112920e04e55b432
SSDEEP 3072:T3YFRQ2tC/SGI2iF1F8uWLyTF0vPdN1tpt+AHW0qhPW8tI21EjLKREHci+siVv8T:r8RQ2t8S/x8ufR0vPdrtp9H3qoN21EjD
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

114128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_XcptFilter __set_app_type __setusermatherr _exit memcpy __getmainargs _except_handler3 __p__commode _adjust_fdiv _initterm _controlfp __p__fmode _acmdln exit

kernel32

DeviceIoControl GetCurrentDirectoryA SizeofResource GetOEMCP TlsAlloc ResumeThread VirtualProtect GetVersion QueryPerformanceCounter GetCurrentProcess GetStringTypeA CloseHandle GetTickCount GetModuleHandleA GetStartupInfoA lstrcmpiA QueryPerformanceFrequency HeapAlloc SetLastError OpenEventA HeapCreate MulDiv CreateProcessA PulseEvent VirtualQueryEx SetProcessWorkingSetSize GetCommandLineA GetCurrentThreadId TerminateProcess GetFileAttributesA TerminateThread SetStdHandle GetFileTime MultiByteToWideChar

user32

CallNextHookEx CharLowerA ChangeClipboardChain BeginPaint GetDC ArrangeIconicWindows CascadeWindows AppendMenuA DialogBoxParamA AnyPopup FindWindowA CharNextA GetMenu AdjustWindowRectEx GetWindowDC AnimateWindow LoadMenuA CallMsgFilterA GetActiveWindow CreateWindowExA CharLowerBuffA CharNextExA CharPrevA ChangeDisplaySettingsA AdjustWindowRect ActivateKeyboardLayout CharPrevExA GetForegroundWindow

Sharing

General

Malware Config

Signatures

File Explorer

3a69308fc69a181472bba584c49bf276_JaffaCakes118

msvcrt

kernel32

user32

generic