749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118

General

Target
749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118
Size 4.0MB
Sample240726-srbtjszape
SHA256 b9267b00e92e7d70cfc6ad95cba0fd1c324ad61e66af3472cf61fa1bf40c5a62
MD5 749a4eb97367f1aa0565c1454daae1ba
SHA1 f7823776d4bb2da0112549785acabf0cfaeaea39
SHA512 46d23870fff00e5d278830b0a5759a61ca38f5b15b4b4474afe9cd58d4a1035623bd055799154b7f931eae3c2b41632a7b71b297dec3363a364402648394f1ee
SSDEEP 98304:FjaimLAtiy6nOJj06feD0EMBeATxaoFHTG:FRCKX6Ol0oBEMcaxaIz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118

File Explorer

749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118

.exe 4.0MB

749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118

IMPHASH ae95d862f8e17c7d74b537ae2ea7bb31
SHA256 b9267b00e92e7d70cfc6ad95cba0fd1c324ad61e66af3472cf61fa1bf40c5a62
MD5 749a4eb97367f1aa0565c1454daae1ba
SHA1 f7823776d4bb2da0112549785acabf0cfaeaea39
SHA512 46d23870fff00e5d278830b0a5759a61ca38f5b15b4b4474afe9cd58d4a1035623bd055799154b7f931eae3c2b41632a7b71b297dec3363a364402648394f1ee
SSDEEP 98304:FjaimLAtiy6nOJj06feD0EMBeATxaoFHTG:FRCKX6Ol0oBEMcaxaIz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4008208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalLock GlobalFix GetPrivateProfileSectionNamesA SetSystemPowerState SetDefaultCommConfigA SetStdHandle InterlockedDecrement SetSystemTimeAdjustment CompareFileTime Sleep CallNamedPipeA SizeofResource GetPriorityClass _lcreat FreeLibraryAndExitThread LoadLibraryW BuildCommDCBAndTimeoutsA GetProcAddress lstrcpyA LocalAlloc ExitProcess SetFilePointerEx CopyFileW SetEnvironmentVariableW GetCurrentDirectoryW SetCommState GetOEMCP SetUnhandledExceptionFilter FindAtomW WaitForMultipleObjects CreateSemaphoreW SetFileApisToOEM EnumResourceNamesA ConnectNamedPipe GetPrivateProfileStructA SetLocalTime SetLastError GetModuleHandleW SearchPathA GetFileAttributesW lstrlenW IsBadWritePtr InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetLastError DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode GetCPInfo GetACP IsValidCodePage MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA WriteConsoleA GetConsoleOutputCP SetFilePointer LCMapStringA LCMapStringW SetEndOfFile GetProcessHeap ReadFile

Sharing

General

Malware Config

Signatures

File Explorer

749a4eb97367f1aa0565c1454daae1ba_JaffaCakes118

kernel32

generic