6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118

General

Target
6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118
Size 209KB
Sample240724-m2hryssgnm
SHA256 e210917fb03f075f4aa2f5dc7dbe64f824a5763842ac6548f65f15a56fb89981
MD5 6b5a672444d08d6ee9edd139ff45875d
SHA1 fb525eb026fabbb12ba66cad34c977f258da2121
SHA512 ff6ce1ed00b543c4609ace2cb242393dedb2f6e5298ee95d02941740a38ecdefac3571ad244062ca3fc7c44b36edd366efb5a9d90e8ef69e2b2e645b7a37fbe0
SSDEEP 3072:/wlkxQRyFl7Rx1LAQRqgU6LFDRqyN2cNMNugf2kt/KyBR0p58A7uBEACzGxDKZ72:4lkOYFdRb0Q4gvLFXffgrBQ7uBEAXSg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118

File Explorer

6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118

.exe 209KB

6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118

IMPHASH 8c6ba39f689eb5f61de89e52a4b6ba2e
SHA256 e210917fb03f075f4aa2f5dc7dbe64f824a5763842ac6548f65f15a56fb89981
MD5 6b5a672444d08d6ee9edd139ff45875d
SHA1 fb525eb026fabbb12ba66cad34c977f258da2121
SHA512 ff6ce1ed00b543c4609ace2cb242393dedb2f6e5298ee95d02941740a38ecdefac3571ad244062ca3fc7c44b36edd366efb5a9d90e8ef69e2b2e645b7a37fbe0
SSDEEP 3072:/wlkxQRyFl7Rx1LAQRqgU6LFDRqyN2cNMNugf2kt/KyBR0p58A7uBEACzGxDKZ72:4lkOYFdRb0Q4gvLFXffgrBQ7uBEAXSg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pdpV3xmmJf52DgS\kacfnobVj4q5DYI.pdb

ws2_32

WSAAccept bind

kernel32

WriteFile LoadLibraryA GetModuleHandleA FlushFileBuffers GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement GetProcAddress ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar RaiseException LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle

user32

wsprintfA wvsprintfA

Sharing

General

Malware Config

Signatures

File Explorer

6b5a672444d08d6ee9edd139ff45875d_JaffaCakes118

ws2_32

kernel32

user32

generic