442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118

General

Target
442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118
Size 491KB
Sample240714-d6djcsvfjm
SHA256 b30b4c7d1185b17a004a4c6bbf5d537e0a3b2fe2c820d2a9555ba4e37613f3f0
MD5 442372b8f6c0a4f154b8a6e7741e8c98
SHA1 81fe5ae0b5cc509fb65376270a7463174ae52ea6
SHA512 2a03427291652b84d08bfd8377633bd1216cee70a5dc86b8df039a6b4c3f3a75e6f266658fc9b12fd9bed2cbff62041f41a2330b5931c99521b332b2a1ddf695
SSDEEP 6144:iC2LiotuWe/fNcV1cwz4NN1O8v6KKImNfm:iC2LdtuWe9G1eNkK6jFu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118

File Explorer

442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118

.dll 491KB

442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118

IMPHASH 263ec39fb76c45b7650e1a58167cfb76
SHA256 b30b4c7d1185b17a004a4c6bbf5d537e0a3b2fe2c820d2a9555ba4e37613f3f0
MD5 442372b8f6c0a4f154b8a6e7741e8c98
SHA1 81fe5ae0b5cc509fb65376270a7463174ae52ea6
SHA512 2a03427291652b84d08bfd8377633bd1216cee70a5dc86b8df039a6b4c3f3a75e6f266658fc9b12fd9bed2cbff62041f41a2330b5931c99521b332b2a1ddf695
SSDEEP 6144:iC2LiotuWe/fNcV1cwz4NN1O8v6KKImNfm:iC2LdtuWe9G1eNkK6jFu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

66086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualQuery FreeLibrary IsBadReadPtr FlushFileBuffers WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP GetStringTypeW HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage InterlockedExchange FatalAppExitA LeaveCriticalSection EnterCriticalSection EnumSystemLocalesW VirtualProtect IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetConsoleCtrlHandler LoadLibraryW LoadLibraryExW OutputDebugStringW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA DeleteCriticalSection GetFileType GetCurrentThread VirtualFree GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc SetLastError WritePrivateProfileStringA GetPrivateProfileStringA LoadLibraryA WinExec VirtualAllocExNuma GlobalFree GlobalUnlock CreateFileA GlobalLock GlobalSize GlobalReAlloc GlobalAlloc GetProcAddress VirtualAlloc GetCurrentProcess CloseHandle WriteFile SetFilePointer ReadFile GetUserDefaultLCID EncodePointer DecodePointer IsDebuggerPresent IsProcessorFeaturePresent RaiseException RtlUnwind GetCommandLineA GetCurrentThreadId GetStdHandle GetModuleFileNameW GetLastError InterlockedDecrement ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CreateSemaphoreW InterlockedIncrement CreateFileW

user32

WinHelpA DefMDIChildProcA DefFrameProcA LoadIconA LoadCursorA GetParent MessageBoxA GetClientRect SetScrollRange SetScrollPos InvalidateRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow EnableMenuItem GetMenu CharLowerA CharUpperA SendDlgItemMessageA GetDlgItem EndDialog DialogBoxParamA CreateDialogParamA SetWindowPos ShowWindow DestroyWindow CreateWindowExA RegisterClassA PostQuitMessage SendMessageA DispatchMessageA TranslateMessage GetMessageA wsprintfA LoadStringA

gdi32

SetWindowOrgEx SetWindowExtEx SetViewportExtEx DPtoLP MoveToEx SetROP2 SetMapMode SelectPalette SaveDC RealizePalette RestoreDC Rectangle LineTo GetStockObject DeleteObject DeleteDC CreatePen CreatePalette CreateDIBitmap CreateCompatibleDC BitBlt SelectObject

comdlg32

GetSaveFileNameA GetOpenFileNameA

Name

.text

Size

237KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

8.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

159KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

442372b8f6c0a4f154b8a6e7741e8c98_JaffaCakes118

kernel32

user32

gdi32

comdlg32

generic