606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118

General

Target
606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118
Size 432KB
Sample240720-3ja76ascrl
SHA256 14a5afcde4ad991b864beb60591b24b0ba0e326a482900aa81b8ecdf389f1bd5
MD5 606d5d36ad6a00351c17fcebec2ed693
SHA1 9b41433028a28492a701cefa5ee3115945e2e3e0
SHA512 a1bee14861a4d39bd1a353f1389b3543c3d367d15b6f592c4a2d06c6e747eb3af339c65a4af558989e63250e6b13820b076b987dcf516177a13352ed93ca7633
SSDEEP 12288:SRFj6AXwRr5jdVd9JyxtrpukNd4WQ8j+aa17dZ6:dAX41dVx+3gU+a67dZ6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118

File Explorer

606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118

.exe 432KB

606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118

IMPHASH e222b52ce40d7089492a8aca64948746
SHA256 14a5afcde4ad991b864beb60591b24b0ba0e326a482900aa81b8ecdf389f1bd5
MD5 606d5d36ad6a00351c17fcebec2ed693
SHA1 9b41433028a28492a701cefa5ee3115945e2e3e0
SHA512 a1bee14861a4d39bd1a353f1389b3543c3d367d15b6f592c4a2d06c6e747eb3af339c65a4af558989e63250e6b13820b076b987dcf516177a13352ed93ca7633
SSDEEP 12288:SRFj6AXwRr5jdVd9JyxtrpukNd4WQ8j+aa17dZ6:dAX41dVx+3gU+a67dZ6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddAtomA ExitProcess FindAtomA GetAtomNameA SetUnhandledExceptionFilter

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _assert _cexit _iob _onexit _setmode abort atexit free malloc memcpy memset signal strcpy strlen wcscpy

user32

BringWindowToTop CheckMenuItem CheckMenuRadioItem ClientToScreen CloseClipboard CopyRect CreateAcceleratorTableW CreateDialogIndirectParamW CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DeferWindowPos DestroyAcceleratorTable DestroyCursor DestroyIcon DestroyMenu DrawEdge DrawFocusRect DrawStateW DrawTextW EnableMenuItem EnableWindow EnumClipboardFormats ExitWindowsEx FillRect GetActiveWindow GetCapture GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDesktopWindow GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMenuItemInfoW GetMenuState GetMessagePos GetParent GetSystemMetrics GetUpdateRect GetUpdateRgn GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InflateRect InsertMenuW IsClipboardFormatAvailable IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorFromFileW LoadIconW LoadImageW ModifyMenuW MoveWindow MsgWaitForMultipleObjects OffsetRect OpenClipboard PostQuitMessage PtInRect RedrawWindow RegisterClipboardFormatW RegisterHotKey ReleaseCapture ReleaseDC RemoveMenu ScreenToClient ScrollWindow SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowCaret ShowCursor SystemParametersInfoW TranslateAcceleratorW TranslateMessage UnionRect UnregisterHotKey UpdateWindow WindowFromPoint

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

252KB

Virtual Size

250KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

606d5d36ad6a00351c17fcebec2ed693_JaffaCakes118

kernel32

msvcrt

user32

generic