580e004f569e3bee2ab5944ce675da6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
580e004f569e3bee2ab5944ce675da6e_JaffaCakes118
Size 1.2MB
Sample240729-w3cf1axfpc
SHA256 d1c521c5fe9adf422f2bae08a76512c83c93eb3023a370ea00d7e820398e691d
MD5 580e004f569e3bee2ab5944ce675da6e
SHA1 53943b391d7e0e5e174ef7be73e88a7c3c8b5a0d
SHA512 871a2376857f845dc7c2ae3ec19638ab05b8e3d2c0c8ef714f4bb94d847e3360bd8cb2c4c6fba780e5a8e651557e5fee1bfcf71d54f91bfc33e6d2d1dcb1ecc7
SSDEEP 24576:BuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:T9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
580e004f569e3bee2ab5944ce675da6e_JaffaCakes118

File Explorer

580e004f569e3bee2ab5944ce675da6e_JaffaCakes118

.dll 1.2MB

580e004f569e3bee2ab5944ce675da6e_JaffaCakes118

IMPHASH 1719e6eb79abbb745bd327c250f33bb3
SHA256 d1c521c5fe9adf422f2bae08a76512c83c93eb3023a370ea00d7e820398e691d
MD5 580e004f569e3bee2ab5944ce675da6e
SHA1 53943b391d7e0e5e174ef7be73e88a7c3c8b5a0d
SHA512 871a2376857f845dc7c2ae3ec19638ab05b8e3d2c0c8ef714f4bb94d847e3360bd8cb2c4c6fba780e5a8e651557e5fee1bfcf71d54f91bfc33e6d2d1dcb1ecc7
SSDEEP 24576:BuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:T9cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

933952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DllMain PeerCollabAddContact PeerCollabAsyncInviteContact PeerCollabAsyncInviteEndpoint PeerCollabCancelInvitation PeerCollabCloseHandle PeerCollabDeleteContact PeerCollabDeleteEndpointData PeerCollabDeleteObject PeerCollabEnumApplicationRegistrationInfo PeerCollabEnumApplications PeerCollabEnumContacts PeerCollabEnumEndpoints PeerCollabEnumObjects PeerCollabEnumPeopleNearMe PeerCollabExportContact PeerCollabGetAppLaunchInfo PeerCollabGetApplicationRegistrationInfo PeerCollabGetContact PeerCollabGetEndpointName PeerCollabGetEventData PeerCollabGetInvitationResponse PeerCollabGetPresenceInfo PeerCollabGetSigninOptions PeerCollabInviteContact PeerCollabInviteEndpoint PeerCollabParseContact PeerCollabQueryContactData PeerCollabRefreshEndpointData PeerCollabRegisterApplication PeerCollabRegisterEvent PeerCollabSetEndpointName PeerCollabSetObject PeerCollabSetPresenceInfo PeerCollabShutdown PeerCollabSignin PeerCollabSignout PeerCollabStartup PeerCollabSubscribeEndpointData PeerCollabUnregisterApplication PeerCollabUnregisterEvent PeerCollabUnsubscribeEndpointData PeerCollabUpdateContact PeerCreatePeerName PeerEndEnumeration PeerEnumGroups PeerEnumIdentities PeerFreeData PeerGetItemCount PeerGetNextItem PeerGroupAddRecord PeerGroupClose PeerGroupCloseDirectConnection PeerGroupConnect PeerGroupConnectByAddress PeerGroupCreate PeerGroupCreateInvitation PeerGroupCreatePasswordInvitation PeerGroupDelete PeerGroupDeleteRecord PeerGroupEnumConnections PeerGroupEnumMembers PeerGroupEnumRecords PeerGroupExportConfig PeerGroupExportDatabase PeerGroupGetEventData PeerGroupGetProperties PeerGroupGetRecord PeerGroupGetStatus PeerGroupImportConfig PeerGroupImportDatabase PeerGroupIssueCredentials PeerGroupJoin PeerGroupOpen PeerGroupOpenDirectConnection PeerGroupParseInvitation PeerGroupPasswordJoin PeerGroupPeerTimeToUniversalTime PeerGroupRegisterEvent PeerGroupResumePasswordAuthentication PeerGroupSearchRecords PeerGroupSendData PeerGroupSetProperties PeerGroupShutdown PeerGroupStartup PeerGroupUniversalTimeToPeerTime PeerGroupUnregisterEvent PeerGroupUpdateRecord PeerHostNameToPeerName PeerIdentityCreate PeerIdentityDelete PeerIdentityExport PeerIdentityGetCert PeerIdentityGetCryptKey PeerIdentityGetDefault PeerIdentityGetFriendlyName PeerIdentityGetXML PeerIdentityImport PeerIdentitySetFriendlyName PeerNameToPeerHostName PeerPnrpEndResolve PeerPnrpGetCloudInfo PeerPnrpGetEndpoint PeerPnrpRegister PeerPnrpResolve PeerPnrpShutdown PeerPnrpStartResolve PeerPnrpStartup PeerPnrpUnregister PeerPnrpUpdateRegistration PeerSSPAddCredentials PeerSSPRemoveCredentials

Name

.text

Size

911KB

Virtual Size

910KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

580e004f569e3bee2ab5944ce675da6e_JaffaCakes118

gdi32

advapi32

kernel32

user32

comdlg32

generic