3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118

General

Target
3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118
Size 1.3MB
Sample240712-nln5gatejh
SHA256 a6eb9a2723bb6a559ee24986287ab685689952d594a89f375bd3bd605c6568c3
MD5 3d30faa7be5d1233282e64a6de7c8543
SHA1 c3e63ab67908eafb1f6226ebe3a4c7dacd7cef80
SHA512 fb613384e073e613c94fe8d9b556d31fe7b761d16686ea00cdcc97378b5f35afebeaf7f7a1f9246ed4f09cc343d2dd7c2b835907686ea9877f6e33970fadc92e
SSDEEP 24576:LUIcwOR0kQhNCn4UrlGN1kCESGNFRhBPKHZAbsAI+QnVvBn0yJ:LURwOqkINCn4SlGNfErNFRHAZAbsAIx3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118

File Explorer

3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118

.exe 1.3MB

3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118

IMPHASH 9222d372923baed7aa9dfa28449a94ea
SHA256 a6eb9a2723bb6a559ee24986287ab685689952d594a89f375bd3bd605c6568c3
MD5 3d30faa7be5d1233282e64a6de7c8543
SHA1 c3e63ab67908eafb1f6226ebe3a4c7dacd7cef80
SHA512 fb613384e073e613c94fe8d9b556d31fe7b761d16686ea00cdcc97378b5f35afebeaf7f7a1f9246ed4f09cc343d2dd7c2b835907686ea9877f6e33970fadc92e
SSDEEP 24576:LUIcwOR0kQhNCn4UrlGN1kCESGNFRhBPKHZAbsAI+QnVvBn0yJ:LURwOqkINCn4SlGNfErNFRHAZAbsAIx3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb

kernel32

CreateFileA FindResourceA FreeLibrary LoadResource WriteFile SizeofResource GetProcAddress LoadLibraryA LockResource EnumResourceNamesA CloseHandle FreeResource GetWindowsDirectoryA OutputDebugStringA GetTempPathA GetModuleHandleW ExitProcess DecodePointer EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameW Sleep HeapSize GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

3d30faa7be5d1233282e64a6de7c8543_JaffaCakes118

kernel32

shell32

generic