3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118

General

Target
3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118
Size 149KB
Sample240729-demyqazckj
SHA256 b7357df40bb095d1d1709bd5ecfe52c1f046821f96642defab5b179622dd08c2
MD5 3489dbd9537a632edbed5ff2bc7ee8bf
SHA1 7aa433b8aef2021a40232b180411a29cd0762477
SHA512 b283f566ad37b9ec168575a0cb55f048022f95269917889b53ae73b68abcf10664dcb8b00bc4e26193417961c60aae3163dc58240b69ae492b94c5fb4e594662
SSDEEP 3072:WY4s5aoSrBTL/3s0Y6OtXjMAW1s7uA+ene1gef:WYNSl/tY6AjpL+enkgef
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118

File Explorer

3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118

.exe 149KB

3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118

IMPHASH a787da6a3dc4b4b9fbd22b4b72053e73
SHA256 b7357df40bb095d1d1709bd5ecfe52c1f046821f96642defab5b179622dd08c2
MD5 3489dbd9537a632edbed5ff2bc7ee8bf
SHA1 7aa433b8aef2021a40232b180411a29cd0762477
SHA512 b283f566ad37b9ec168575a0cb55f048022f95269917889b53ae73b68abcf10664dcb8b00bc4e26193417961c60aae3163dc58240b69ae492b94c5fb4e594662
SSDEEP 3072:WY4s5aoSrBTL/3s0Y6OtXjMAW1s7uA+ene1gef:WYNSl/tY6AjpL+enkgef
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

41845

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc LoadLibraryA GetVersionExA FreeLibrary SetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetModuleFileNameA LoadLibraryW SetErrorMode GetProcAddress LocalAlloc InterlockedExchange GetLastError RaiseException HeapAlloc SetEnvironmentVariableA GetCurrentDirectoryA SetCurrentDirectoryA GetDriveTypeA GetFullPathNameA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA HeapFree GetProcessHeap GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapDestroy HeapCreate GetModuleHandleA ExitProcess WriteFile GetStdHandle Sleep TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection GetCPInfo GetACP GetOEMCP LCMapStringA MultiByteToWideChar LCMapStringW GetLocaleInfoA GetStringTypeA GetStringTypeW

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

3489dbd9537a632edbed5ff2bc7ee8bf_JaffaCakes118

kernel32

advapi32

generic