6109279f04efe1ad89fda79967f5e00a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6109279f04efe1ad89fda79967f5e00a_JaffaCakes118
Size 241KB
Sample240721-xlfmrssflp
SHA256 daa099643ff1df536c064b4eeec0f6212b30a8cae2e0faccc2a6435d3abb51f3
MD5 6109279f04efe1ad89fda79967f5e00a
SHA1 a4366b40dfcf784991b2f4ff0198c10e8e537b0f
SHA512 918178821f70c4d4ec8b4f57273fe5d9b61df60b1851f85683fb26444c1d54117a8d902970c9959a197e90fa6f63f4992b1ea33f6b5f0c0f79f43d607c6d5369
SSDEEP 3072:psD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XeAXrRt8x6o7PivriFAACZb+BGObN:pplzpTVDVa2en/V6MpP2TC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6109279f04efe1ad89fda79967f5e00a_JaffaCakes118

File Explorer

6109279f04efe1ad89fda79967f5e00a_JaffaCakes118

.exe 241KB

6109279f04efe1ad89fda79967f5e00a_JaffaCakes118

IMPHASH dc1149822fd0425f33e3e63563b9da64
SHA256 daa099643ff1df536c064b4eeec0f6212b30a8cae2e0faccc2a6435d3abb51f3
MD5 6109279f04efe1ad89fda79967f5e00a
SHA1 a4366b40dfcf784991b2f4ff0198c10e8e537b0f
SHA512 918178821f70c4d4ec8b4f57273fe5d9b61df60b1851f85683fb26444c1d54117a8d902970c9959a197e90fa6f63f4992b1ea33f6b5f0c0f79f43d607c6d5369
SSDEEP 3072:psD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XeAXrRt8x6o7PivriFAACZb+BGObN:pplzpTVDVa2en/V6MpP2TC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\VertexNet\Loader VC++\loader\RELEASE_STATIC\loader.pdb

wsock32

send closesocket gethostname inet_addr WSACleanup gethostbyname connect WSAStartup ioctlsocket htons recv socket

wininet

InternetReadFile InternetCloseHandle InternetOpenA InternetOpenUrlA

kernel32

LCMapStringW WriteConsoleW HeapReAlloc GetTimeZoneInformation FlushFileBuffers SetStdHandle CreateProcessA GetExitCodeProcess IsValidCodePage SetEvent ExitThread WaitForSingleObject Sleep CreateEventA CloseHandle CreateThread GetComputerNameA GetLocaleInfoA GetTickCount GetWindowsDirectoryA GetVolumeInformationA CopyFileA GetModuleFileNameA GetTempPathA ExitProcess WinExec CreateFileA Process32First WriteFile Module32First GetLastError GetStringTypeW Process32Next CreateToolhelp32Snapshot Module32Next GetCurrentProcessId SetFileAttributesA CreateMutexA FindResourceA FreeResource LoadResource SizeofResource LockResource GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameW InterlockedDecrement GetCurrentThreadId SetLastError InterlockedIncrement TlsFree TlsSetValue CompareStringW SetEnvironmentVariableA SetEndOfFile CreateFileW GetProcessHeap TlsGetValue TlsAlloc HeapFree DeleteFileA GetSystemTimeAsFileTime EncodePointer DecodePointer GetProcAddress GetModuleHandleW GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc IsProcessorFeaturePresent RaiseException HeapCreate GetFileAttributesA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer HeapSize LoadLibraryW

user32

TranslateMessage DispatchMessageA ToAscii GetKeyState CallNextHookEx GetKeyboardState MapVirtualKeyA SetWindowsHookExA GetForegroundWindow GetWindowTextA MessageBoxA GetLastInputInfo GetMessageA

shell32

SHGetSpecialFolderPathA ShellExecuteA

advapi32

GetUserNameA RegOpenKeyExA RegDeleteKeyA RegSetValueExA GetCurrentHwProfileA

urlmon

URLDownloadToFileA

Sharing

General

Malware Config

Signatures

File Explorer

6109279f04efe1ad89fda79967f5e00a_JaffaCakes118

wsock32

wininet

kernel32

user32

shell32

advapi32

urlmon

generic