65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118
Size 1.1MB
Sample240723-ddbjastgkm
SHA256 80ad5b057e121c68d55181f094a0529d7f5ef7e153705bed7fa2d78999b100f0
MD5 65dc27535bb1243633ee28ce8a6c465d
SHA1 294b97e2e544c227900e2007aed5f11865c296e5
SHA512 dd1d204879f3bfba91bfb4c449f485463952011afe6b8adda85eab364a1bcb9bbcf888714f8a6674304330d901037718c2021d4d223bf3d60ffa26dc832cfa47
SSDEEP 24576:jsrTwMhJ0g3bvmwuxHeiqdpFOiaelcy3q:jadh33jzuizOvy3q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118

File Explorer

65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118

.exe 1.1MB

65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118

IMPHASH ece6278d195fe70ce30ccfd1c3b1f256
SHA256 80ad5b057e121c68d55181f094a0529d7f5ef7e153705bed7fa2d78999b100f0
MD5 65dc27535bb1243633ee28ce8a6c465d
SHA1 294b97e2e544c227900e2007aed5f11865c296e5
SHA512 dd1d204879f3bfba91bfb4c449f485463952011afe6b8adda85eab364a1bcb9bbcf888714f8a6674304330d901037718c2021d4d223bf3d60ffa26dc832cfa47
SSDEEP 24576:jsrTwMhJ0g3bvmwuxHeiqdpFOiaelcy3q:jadh33jzuizOvy3q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

urlmon

URLDownloadToFileA

comctl32

ord17

kernel32

CreateProcessA GetCommandLineA TerminateProcess RemoveDirectoryA GetCurrentProcess OpenProcess lstrcatA SetFileAttributesA FindClose WaitForSingleObject Sleep GetEnvironmentVariableA MoveFileA GetTempPathA GetShortPathNameA CreateDirectoryA GetStartupInfoA LocalFree GetFileAttributesA FindFirstFileA GetModuleFileNameA GetExitCodeProcess FindNextFileA GetModuleHandleA CompareStringA SetEndOfFile MoveFileExA GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapReAlloc VirtualAlloc VirtualFree HeapCreate GetLongPathNameA FormatMessageA DeleteFileA CloseHandle GetLastError ReadFile CreateFileA WriteConsoleW lstrcpyA CompareStringW SetUnhandledExceptionFilter HeapDestroy HeapSize GetFileType SetHandleCount GetCurrentDirectoryA GetFullPathNameA InitializeCriticalSection LoadLibraryA UnhandledExceptionFilter SetEnvironmentVariableA IsDebuggerPresent GetTimeFormatA GetDateFormatA ExitThread ResumeThread CreateThread GetSystemTimeAsFileTime GetProcAddress ExitProcess FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA HeapFree HeapAlloc GetVersionExA GetProcessHeap RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetTimeZoneInformation SetFilePointer EnterCriticalSection LeaveCriticalSection WriteFile GetConsoleCP GetConsoleMode GetStdHandle DeleteCriticalSection

user32

DialogBoxParamA ShowWindow BringWindowToTop KillTimer DestroyWindow TranslateMessage PostMessageA GetMessageA DispatchMessageA wsprintfA GetForegroundWindow GetDlgItem SetTimer GetWindowTextA SetWindowTextA EndDialog CreateDialogParamA ExitWindowsEx UpdateWindow BlockInput SendMessageA FindWindowA MessageBoxA GetDlgItemTextA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA AdjustTokenPrivileges RegCreateKeyExA RegQueryValueExA RegDeleteValueA LookupPrivilegeValueA RegSetValueExA GetUserNameA OpenProcessToken

psapi

GetModuleBaseNameA EnumProcessModules EnumProcesses

shell32

SHFileOperationA SHGetFolderPathA SHCreateDirectoryExA ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

65dc27535bb1243633ee28ce8a6c465d_JaffaCakes118

urlmon

comctl32

kernel32

user32

advapi32

psapi

shell32

generic