5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118
Size 1.2MB
Sample240720-c6fs2swele
SHA256 be64588a0a2153aca54f18f81ce3720b0c6df9d1b844eba34ba2cafe509ad81f
MD5 5eb8d13f487019cbcf71762fa3592e1a
SHA1 9529e3c0b94b53db342ca6b00e6491bd73327ae1
SHA512 df620910329236d3e5a3957e20d306ff3803b3c2f7fe8e4c6b03b497822e2e76786c8e1e0f504017c249c248c581456dba95c5572849b1ed751dc3291d8cbf81
SSDEEP 24576:1nJjkPyZvj0V4cx4riwWu0LE/kuZBSgy9c8VbXjM8XZw/i:1JjhZb0V4cwKw/kuZBSgy9cqbzMwEi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118

File Explorer

5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118

.exe 1.2MB

5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118

IMPHASH a6d1f237a38b6e7d3a48b606fa0d7939
SHA256 be64588a0a2153aca54f18f81ce3720b0c6df9d1b844eba34ba2cafe509ad81f
MD5 5eb8d13f487019cbcf71762fa3592e1a
SHA1 9529e3c0b94b53db342ca6b00e6491bd73327ae1
SHA512 df620910329236d3e5a3957e20d306ff3803b3c2f7fe8e4c6b03b497822e2e76786c8e1e0f504017c249c248c581456dba95c5572849b1ed751dc3291d8cbf81
SSDEEP 24576:1nJjkPyZvj0V4cx4riwWu0LE/kuZBSgy9c8VbXjM8XZw/i:1JjhZb0V4cwKw/kuZBSgy9cqbzMwEi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

5eb8d13f487019cbcf71762fa3592e1a_JaffaCakes118

advapi32

kernel32

comctl32

comdlg32

gdi32

shell32

user32

ole32

generic