61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118
Size 270KB
Sample240721-3fhstszfla
SHA256 d804387f881a97ca943beace367073d28e6bf2094385851e03d672e7acd391ca
MD5 61db48ccf147784d6abc52a98bdef5eb
SHA1 83691cbcc2eb93e3084bb3ba7a07b7bc73fe7d51
SHA512 fb724c896bf546838ef8ae765831818be3cdd74f2d8e6cf240af262bf8e446e9c37654712ca14babd96d1a31d50b0ffaffb8dcfa2cab5d4add85fd42b4c7c6e5
SSDEEP 6144:Bwy0LEcBRM4RFcN0WKMrH5RoGyJgWQcvlC:0EcTNRFcN0+z4GrlcNC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118

File Explorer

61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118

.exe 270KB

61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118

IMPHASH 04ce5770677684a4808573edc2b5de6d
SHA256 d804387f881a97ca943beace367073d28e6bf2094385851e03d672e7acd391ca
MD5 61db48ccf147784d6abc52a98bdef5eb
SHA1 83691cbcc2eb93e3084bb3ba7a07b7bc73fe7d51
SHA512 fb724c896bf546838ef8ae765831818be3cdd74f2d8e6cf240af262bf8e446e9c37654712ca14babd96d1a31d50b0ffaffb8dcfa2cab5d4add85fd42b4c7c6e5
SSDEEP 6144:Bwy0LEcBRM4RFcN0WKMrH5RoGyJgWQcvlC:0EcTNRFcN0+z4GrlcNC
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc HeapSize GetCPInfo ExitThread GetACP GetOEMCP TerminateProcess CreateThread FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree HeapAlloc FreeEnvironmentStringsA UnhandledExceptionFilter ExitProcess MulDiv GetStringTypeW IsBadReadPtr IsBadWritePtr IsBadCodePtr SetStdHandle GetLocaleInfoA GetLocaleInfoW SetEvent WaitForSingleObject CloseHandle GlobalAlloc GlobalDeleteAtom HeapFree GetStartupInfoA RaiseException GetCommandLineA GetModuleHandleA RtlUnwind GlobalAddAtomA SetErrorMode GlobalGetAtomNameA GetModuleFileNameA GetFullPathNameA FindClose GetVolumeInformationA FindFirstFileA SetEndOfFile FlushFileBuffers ReadFile SetFilePointer WriteFile CreateFileA GetCurrentProcess WritePrivateProfileStringA GetProcessVersion GetVersionExA TlsGetValue LoadLibraryA GetProcAddress EnterCriticalSection LocalReAlloc TlsSetValue lstrcmpA lstrcmpiA GlobalReAlloc LeaveCriticalSection TlsAlloc MultiByteToWideChar GetCurrentThread GlobalHandle DeleteCriticalSection lstrcpyA InitializeCriticalSection LocalAlloc GlobalFlags SizeofResource GetLastError LocalFree lstrcpynA LCMapStringW SetLastError FreeLibrary LoadResource CreateEventA SuspendThread SetThreadPriority ResumeThread VirtualAlloc GetStringTypeA SetUnhandledExceptionFilter LCMapStringA WideCharToMultiByte GetCurrentThreadId FindResourceA LockResource GlobalFree GlobalUnlock GlobalLock GetProfileStringA lstrcatA GetVersion InterlockedIncrement InterlockedDecrement lstrlenA

user32

MessageBoxA GetCursorPos ValidateRect TranslateMessage GetMessageA KillTimer SetCursor WaitMessage GetDC ReleaseDC GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA GetClassNameA PtInRect ClientToScreen GetDesktopWindow LoadCursorA GetSysColorBrush DestroyMenu FindWindowA InvalidateRect OffsetRect LoadStringA ReleaseCapture WindowFromPoint CharUpperA SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam BringWindowToTop IntersectRect InflateRect PostMessageA UpdateWindow SystemParametersInfoA MapWindowPoints GetSysColor PeekMessageA DispatchMessageA GetFocus SetFocus PostQuitMessage DeferWindowPos BeginDeferWindowPos CopyRect wvsprintfA ShowOwnedPopups SetScrollInfo ShowScrollBar GetScrollPos SetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenuItemCount GetSubMenu GetMenuItemID GetMenu GetWindowTextLengthA GetWindowTextA GetDlgCtrlID GetKeyState DefWindowProcA CreateWindowExA SetWindowsHookExA CallNextHookEx SetPropA UnhookWindowsHookEx GetLastActivePopup GetForegroundWindow SetForegroundWindow GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetWindow GetWindowRect SetWindowLongA SetWindowPos RegisterWindowMessageA GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetParent GetWindowLongA GetDlgItem IsWindowEnabled SetTimer IsIconic GetSystemMetrics GetClientRect DrawIcon SendMessageA LoadIconA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem ShowWindow SetWindowTextA IsDialogMessageA EndDeferWindowPos IsWindowVisible AdjustWindowRectEx EqualRect EnableWindow ScrollWindow ScreenToClient SetScrollRange SendDlgItemMessageA HideCaret ShowCaret UnregisterClassA DrawFocusRect DefDlgProcA CharNextA IsWindowUnicode ExcludeUpdateRgn

gdi32

SetBkColor CreateBitmap DeleteDC SaveDC RestoreDC SelectObject SetBkMode GetStockObject SetViewportOrgEx OffsetViewportOrgEx SetMapMode ScaleViewportExtEx SetViewportExtEx SetTextColor ScaleWindowExtEx SetWindowExtEx GetObjectA IntersectClipRect DeleteObject GetDeviceCaps CreateSolidBrush RectVisible TextOutA PtVisible Escape GetTextExtentPointA ExtTextOutA PatBlt CreateDIBitmap CreateCompatibleDC GetClipBox BitBlt

comdlg32

GetOpenFileNameA GetSaveFileNameA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegCloseKey RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA

shell32

DragFinish DragQueryFileA

comctl32

ImageList_Destroy ord17

wsock32

ioctlsocket bind accept htonl htons recv WSAAsyncSelect inet_ntoa socket recvfrom sendto connect WSAGetLastError WSASetLastError WSAStartup WSACleanup gethostbyname closesocket send

Sharing

General

Malware Config

Signatures

File Explorer

61db48ccf147784d6abc52a98bdef5eb_JaffaCakes118

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

generic