43a3cb367aad2a93691346ec4931763c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
43a3cb367aad2a93691346ec4931763c_JaffaCakes118
Size 255KB
Sample240713-2mfflszfnk
SHA256 942b9ddf33d9d9e956fae3a3e173677ee6da9e0a409aca4a4a094e3a956f1da0
MD5 43a3cb367aad2a93691346ec4931763c
SHA1 f37d5cd711c748005e1f3cdff5730741860487eb
SHA512 cba3b2cf756ed88ae69632366aa3941b17634c044fd32f2e48c1ae397d61ba4ad9a9454901934fefe6babebed310562c92da0ec4e5bb923da2ce44c66cda4aa2
SSDEEP 6144:P6Gq/9tWzDxERso/KR6RKmxC2TBEDO+TErkvOT:lotWxErKgRKmxC2TaDv6kvOT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a3cb367aad2a93691346ec4931763c_JaffaCakes118

File Explorer

43a3cb367aad2a93691346ec4931763c_JaffaCakes118

.exe 255KB

43a3cb367aad2a93691346ec4931763c_JaffaCakes118

IMPHASH 18b3ab6c8f86ce32efca1171c03dedd1
SHA256 942b9ddf33d9d9e956fae3a3e173677ee6da9e0a409aca4a4a094e3a956f1da0
MD5 43a3cb367aad2a93691346ec4931763c
SHA1 f37d5cd711c748005e1f3cdff5730741860487eb
SHA512 cba3b2cf756ed88ae69632366aa3941b17634c044fd32f2e48c1ae397d61ba4ad9a9454901934fefe6babebed310562c92da0ec4e5bb923da2ce44c66cda4aa2
SSDEEP 6144:P6Gq/9tWzDxERso/KR6RKmxC2TBEDO+TErkvOT:lotWxErKgRKmxC2TaDv6kvOT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegEnumKeyA

user32

MessageBoxA EndPaint BeginPaint CopyRect SetActiveWindow UnpackDDElParam ReuseDDElParam

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer HeapSetInformation EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapFree FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA MultiByteToWideChar GetFileAttributesA ExitThread GetCurrentThreadId CreateThread InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoW HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent Sleep RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW SetEnvironmentVariableA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW SetFilePointer ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW GetFileSize VirtualAlloc SystemTimeToFileTime SystemTimeToTzSpecificLocalTime UnmapViewOfFile MapViewOfFile CreateFileMappingA OpenFileMappingA

ole32

CoResumeClassObjects

oleaut32

VarR8FromDec

Sharing

General

Malware Config

Signatures

File Explorer

43a3cb367aad2a93691346ec4931763c_JaffaCakes118

advapi32

user32

comctl32

kernel32

ole32

oleaut32

generic