629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118
Size 435KB
Sample240722-kybs5ayera
SHA256 b63ecc7941b1c62dc98d59344ec81a623276033f889fa43628010fc54030e100
MD5 629b3cbb423e7b5b51f23a87b99a92e6
SHA1 014c1d1873fbb5f18581b1da3414417bc55a5cc9
SHA512 4892da02d3262c7a4d781917474fee3cb5b22ed494b670c43cd53429eef0e7a8e7603efb68bd427be34d83037ff7900d79278a0195c5a1c8d3ee68253ad6ad00
SSDEEP 6144:Sr5w4udmLIY3llsUfFUlakZZlXV5VNIFdjSLjD9bHkXauTHmS0e901zp:mWSzbsckakZR5zqduLjpbE/K3d1p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

File Explorer

629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

.exe 435KB

629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

IMPHASH a57bcbf302bad83a90d00f7b978eade0
SHA256 b63ecc7941b1c62dc98d59344ec81a623276033f889fa43628010fc54030e100
MD5 629b3cbb423e7b5b51f23a87b99a92e6
SHA1 014c1d1873fbb5f18581b1da3414417bc55a5cc9
SHA512 4892da02d3262c7a4d781917474fee3cb5b22ed494b670c43cd53429eef0e7a8e7603efb68bd427be34d83037ff7900d79278a0195c5a1c8d3ee68253ad6ad00
SSDEEP 6144:Sr5w4udmLIY3llsUfFUlakZZlXV5VNIFdjSLjD9bHkXauTHmS0e901zp:mWSzbsckakZR5zqduLjpbE/K3d1p
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetProcessHeap LoadLibraryA GetConsoleWindow ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents SetEndOfFile SetEnvironmentVariableA CreateFileW GetFileAttributesExW CreateProcessA GetExitCodeProcess WaitForSingleObject GetStringTypeW EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName GetLocaleInfoEx CompareStringEx GetDateFormatEx GetTimeFormatEx HeapSize LoadLibraryW OutputDebugStringW WriteConsoleW SetFilePointerEx IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection GetLastError AreFileApisANSI MultiByteToWideChar EncodePointer DecodePointer InterlockedDecrement ExitProcess GetModuleHandleExW GetProcAddress GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW DeleteCriticalSection InitializeCriticalSectionAndSpinCount FatalAppExitA HeapFree Sleep CloseHandle FlushFileBuffers GetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetFileType InitOnceExecuteOnce RtlUnwind ReadFile ReadConsoleW SetFilePointer DeleteFileW MoveFileExW GetModuleFileNameW InterlockedExchange FreeLibrary LoadLibraryExW SetConsoleCtrlHandler InterlockedIncrement IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThread GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle SetConsoleMode

rtutils

RouterLogEventA TraceVprintfExW MprSetupProtocolEnum RouterLogDeregisterA RouterLogRegisterW TraceDeregisterW

wininet

FtpPutFileA FindNextUrlCacheContainerW FtpDeleteFileA FtpRenameFileA

urlmon

HlinkNavigateString GetClassURL

mswsock

GetAddressByNameA SetServiceA AcceptEx

loadperf

UnloadPerfCounterTextStringsW UnloadPerfCounterTextStringsA

user32

ShowWindow

Sharing

General

Malware Config

Signatures

File Explorer

629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

kernel32

rtutils

wininet

urlmon

mswsock

loadperf

user32

generic