55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118

General

Target
55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118
Size 1.5MB
Sample240718-b7htcszbpj
SHA256 684036adf28f3fd61de6309f04c081158f56daa810742ca01b1ff132dcddc579
MD5 55add9edfc6554324406ec3c3f6a28ba
SHA1 3caccd46b1ca4944f3b88f7aa241900b09c99818
SHA512 6ecb4eb04ab43b2d1827eefa221e25d07b925f7e719aa8c1b1170c1c2d27e1fb79a1b8a1334eb075a5c51161348c196ec51b14ccf7b3d1ebaa9ae81d1d86697c
SSDEEP 24576:sHowcKaJsy4JzFsef1K7ywjcFT3qgoFp5nM5MJGwy7XNBvVGht:sHXA+yaFsew7sFbqt75n/GwsXTVS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118

File Explorer

55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118

.exe 1.5MB

55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118

IMPHASH 9222d372923baed7aa9dfa28449a94ea
SHA256 684036adf28f3fd61de6309f04c081158f56daa810742ca01b1ff132dcddc579
MD5 55add9edfc6554324406ec3c3f6a28ba
SHA1 3caccd46b1ca4944f3b88f7aa241900b09c99818
SHA512 6ecb4eb04ab43b2d1827eefa221e25d07b925f7e719aa8c1b1170c1c2d27e1fb79a1b8a1334eb075a5c51161348c196ec51b14ccf7b3d1ebaa9ae81d1d86697c
SSDEEP 24576:sHowcKaJsy4JzFsef1K7ywjcFT3qgoFp5nM5MJGwy7XNBvVGht:sHXA+yaFsew7sFbqt75n/GwsXTVS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb

kernel32

CreateFileA FindResourceA FreeLibrary LoadResource WriteFile SizeofResource GetProcAddress LoadLibraryA LockResource EnumResourceNamesA CloseHandle FreeResource GetWindowsDirectoryA OutputDebugStringA GetTempPathA GetModuleHandleW ExitProcess DecodePointer EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameW Sleep HeapSize GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

55add9edfc6554324406ec3c3f6a28ba_JaffaCakes118

kernel32

shell32

generic