40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118
Size 152KB
Sample240729-mj9sqayake
SHA256 ce0158d3a60fe332f3922075e5fff8fab839b23b4a58789859c0b75e66a77ea7
MD5 40d1f4db7615ef17423cf6f8f9bf33dc
SHA1 d8074f62b13c93b51c7487a4b345332096d18bff
SHA512 580566f83bd30dfcbfabfec80d4253134fa10e46f52b34615594dd341e5e0fe620f975edd3d1cd7e82f279417fc34d5e1ebf2d7a1e6998c2898cf3ebf73f1629
SSDEEP 3072:3uUoQHCyImFCAOTlAlrlnMd21rvx7DW1m5tXa1l9VCLP:nCyKAOoZ021rJPom5tXa5VQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118

File Explorer

40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118

.exe 152KB

40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118

IMPHASH 63d9a32ebdd5daf5801711100aa2574b
SHA256 ce0158d3a60fe332f3922075e5fff8fab839b23b4a58789859c0b75e66a77ea7
MD5 40d1f4db7615ef17423cf6f8f9bf33dc
SHA1 d8074f62b13c93b51c7487a4b345332096d18bff
SHA512 580566f83bd30dfcbfabfec80d4253134fa10e46f52b34615594dd341e5e0fe620f975edd3d1cd7e82f279417fc34d5e1ebf2d7a1e6998c2898cf3ebf73f1629
SSDEEP 3072:3uUoQHCyImFCAOTlAlrlnMd21rvx7DW1m5tXa1l9VCLP:nCyKAOoZ021rJPom5tXa5VQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep FreeLibrary CompareStringW CompareStringA ReadFile SetEndOfFile GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter InterlockedExchange GetOEMCP GetACP CreateFileA FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA VirtualQuery GetSystemInfo GlobalAlloc GetCPInfo GetLocaleInfoA SetFilePointer IsBadCodePtr SetUnhandledExceptionFilter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile CloseHandle LCMapStringW MultiByteToWideChar LCMapStringA GetTimeZoneInformation WideCharToMultiByte HeapSize GlobalLock GlobalUnlock GetCurrentProcess GetExitCodeProcess ExitProcess OutputDebugStringA GetLastError GetComputerNameA lstrcpyA lstrcatA IsBadReadPtr VirtualAlloc LoadLibraryA VirtualProtect GetProcAddress TerminateProcess IsBadWritePtr HeapReAlloc VirtualFree HeapCreate HeapDestroy RaiseException SetEnvironmentVariableA GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA HeapFree GetSystemTimeAsFileTime RtlUnwind HeapAlloc

user32

ReleaseDC ShowWindow wsprintfA MessageBoxA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard DeleteMenu GetSystemMenu GetClientRect GetWindowRect SystemParametersInfoA SetWindowPos AdjustWindowRectEx ValidateRect GetMenu PostQuitMessage PeekMessageA SendMessageA GetMessageA TranslateMessage DispatchMessageA WaitMessage DefWindowProcA UnregisterClassA DestroyWindow LoadCursorA RegisterClassExA SetRect AdjustWindowRect CreateWindowExA GetDC UpdateWindow SetFocus GetWindowLongA SetWindowLongA

winmm

timeGetTime

d3d8

Direct3DCreate8

wsock32

bind WSAStartup send recv connect closesocket htons getservbyname socket WSACleanup gethostbyname

Sharing

General

Malware Config

Signatures

File Explorer

40d1f4db7615ef17423cf6f8f9bf33dc_JaffaCakes118

kernel32

user32

winmm

d3d8

wsock32

generic