70f515d95bea22b5764185f203b57925_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
70f515d95bea22b5764185f203b57925_JaffaCakes118
Size 2.7MB
Sample240725-yeebssteqa
SHA256 b53c443e37a06cf2c031531e3558e9f1cc2639d8f20148714f1744e3ed622681
MD5 70f515d95bea22b5764185f203b57925
SHA1 5f5254764798d53bfdf2a00e235697bd222554fa
SHA512 6734f42c5791309ee166db4e0397473496295bc47b4e7cd87c00c3c9a988cbf70176b8d609295fa6bb947789e6f81b3a874e8facf294ab4d03894b17f996238d
SSDEEP 49152:QAJYJUfOJH2bzzkE/gNXov3rM+XhghAaecWviq7XzGx38uPDzWkmLm6oyq8bL7A1:7JYJIOJGzGmoPh/AJDGDLCHmI/S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f515d95bea22b5764185f203b57925_JaffaCakes118

File Explorer

70f515d95bea22b5764185f203b57925_JaffaCakes118

.exe 2.7MB

70f515d95bea22b5764185f203b57925_JaffaCakes118

IMPHASH cef7ca55ab4883d6522d428ae0e9ccef
SHA256 b53c443e37a06cf2c031531e3558e9f1cc2639d8f20148714f1744e3ed622681
MD5 70f515d95bea22b5764185f203b57925
SHA1 5f5254764798d53bfdf2a00e235697bd222554fa
SHA512 6734f42c5791309ee166db4e0397473496295bc47b4e7cd87c00c3c9a988cbf70176b8d609295fa6bb947789e6f81b3a874e8facf294ab4d03894b17f996238d
SSDEEP 49152:QAJYJUfOJH2bzzkE/gNXov3rM+XhghAaecWviq7XzGx38uPDzWkmLm6oyq8bL7A1:7JYJIOJGzGmoPh/AJDGDLCHmI/S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStdHandle VirtualAlloc VirtualFree GetACP GetOEMCP GetModuleHandleW MulDiv GlobalFree GlobalAlloc SizeofResource LockResource LoadResource FindResourceA lstrcmpiA lstrcmpW MultiByteToWideChar WideCharToMultiByte ExpandEnvironmentStringsW lstrlenA RemoveDirectoryW FindClose FindNextFileW DeleteFileW FindFirstFileW LoadLibraryA GetEnvironmentVariableW CompareFileTime GetSystemTimeAsFileTime lstrlenW GetUserDefaultUILanguage GetUserDefaultLCID GetTempPathW SetEnvironmentVariableW WriteFile CloseHandle CreateFileW GetDriveTypeW SetCurrentDirectoryW GetModuleFileNameW GetCommandLineW GetVersionExW GetProcAddress FindResourceW TerminateThread ResumeThread SuspendThread LocalFree lstrcpyW FormatMessageW GetSystemDirectoryW DeleteCriticalSection GetFileSize SetFilePointer ReadFile SetFileTime SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects CreateEventW SetEvent ResetEvent InitializeCriticalSection CreateDirectoryW GetFileAttributesW GetLocalTime SystemTimeToFileTime GetLastError CreateThread WaitForSingleObject GetExitCodeThread Sleep SetFileAttributesW lstrcmpiW SetLastError GetStartupInfoA

user32

MessageBoxA GetKeyState GetDlgItem GetClientRect SetWindowLongW SetFocus ShowWindow DrawTextW GetSystemMetrics GetDC ClientToScreen GetWindow DialogBoxIndirectParamW SystemParametersInfoW DrawIconEx CallWindowProcW DefWindowProcW wvsprintfW LoadImageW wsprintfA MessageBeep EnableWindow IsWindow EnableMenuItem GetSystemMenu GetParent GetWindowRect ScreenToClient CreateWindowExW SetTimer GetMessageW DispatchMessageW KillTimer DestroyWindow CharUpperW EndDialog SendMessageW ReleaseDC wsprintfW CreateWindowExA GetSysColor SetWindowTextW GetWindowTextLengthW CopyImage GetClassNameA GetWindowLongW GetMenu SetWindowPos GetWindowDC LoadIconW GetWindowTextW

gdi32

DeleteDC StretchBlt SetStretchBltMode CreateCompatibleBitmap SelectObject CreateCompatibleDC GetObjectW GetDeviceCaps CreateFontIndirectW DeleteObject GetCurrentObject

shell32

SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc ShellExecuteExW ShellExecuteW SHGetSpecialFolderPathW

ole32

CoInitialize CoCreateInstance CreateStreamOnHGlobal

oleaut32

VariantClear SysAllocString OleLoadPicture

msvcrt

_controlfp ?terminate@@YAXXZ ??3@YAXPAX@Z ??2@YAPAXI@Z _purecall __CxxFrameHandler memcmp free malloc memcpy memmove strncmp _wtol _wcsnicmp memset _CxxThrowException _beginthreadex _except_handler3 __dllonexit _onexit ??1type_info@@UAE@XZ _c_exit _exit _XcptFilter _cexit exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type

Sharing

General

Malware Config

Signatures

File Explorer

70f515d95bea22b5764185f203b57925_JaffaCakes118

kernel32

user32

gdi32

shell32

ole32

oleaut32

msvcrt

generic