7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118
Size 1.2MB
Sample240801-cbr8lazfkf
SHA256 dc23e2b53c2f9f56939cd4765aaea383fb37e638afe4db25e55fcc33a065792c
MD5 7ec087fb5c9ac0a2ed26f817ccbe872a
SHA1 7e186b2401393151ba721cfb79533dd277235f30
SHA512 dfcf6d814a56829c535b1742be85c718839f386ef29e09281dce0afdf79046b4b507de23b30c1810938c26dfbb235ab8e650a6b7353560021db47903e026d12e
SSDEEP 24576:SuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:69cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118

File Explorer

7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118

.dll 1.2MB

7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118

IMPHASH 1719e6eb79abbb745bd327c250f33bb3
SHA256 dc23e2b53c2f9f56939cd4765aaea383fb37e638afe4db25e55fcc33a065792c
MD5 7ec087fb5c9ac0a2ed26f817ccbe872a
SHA1 7e186b2401393151ba721cfb79533dd277235f30
SHA512 dfcf6d814a56829c535b1742be85c718839f386ef29e09281dce0afdf79046b4b507de23b30c1810938c26dfbb235ab8e650a6b7353560021db47903e026d12e
SSDEEP 24576:SuYfg4LhHr4NFXKJO1aUiDBvZ2+ITHmpclO9N:69cKrUqZWLAcU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

933952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DllMain PeerCollabAddContact PeerCollabAsyncInviteContact PeerCollabAsyncInviteEndpoint PeerCollabCancelInvitation PeerCollabCloseHandle PeerCollabDeleteContact PeerCollabDeleteEndpointData PeerCollabDeleteObject PeerCollabEnumApplicationRegistrationInfo PeerCollabEnumApplications PeerCollabEnumContacts PeerCollabEnumEndpoints PeerCollabEnumObjects PeerCollabEnumPeopleNearMe PeerCollabExportContact PeerCollabGetAppLaunchInfo PeerCollabGetApplicationRegistrationInfo PeerCollabGetContact PeerCollabGetEndpointName PeerCollabGetEventData PeerCollabGetInvitationResponse PeerCollabGetPresenceInfo PeerCollabGetSigninOptions PeerCollabInviteContact PeerCollabInviteEndpoint PeerCollabParseContact PeerCollabQueryContactData PeerCollabRefreshEndpointData PeerCollabRegisterApplication PeerCollabRegisterEvent PeerCollabSetEndpointName PeerCollabSetObject PeerCollabSetPresenceInfo PeerCollabShutdown PeerCollabSignin PeerCollabSignout PeerCollabStartup PeerCollabSubscribeEndpointData PeerCollabUnregisterApplication PeerCollabUnregisterEvent PeerCollabUnsubscribeEndpointData PeerCollabUpdateContact PeerCreatePeerName PeerEndEnumeration PeerEnumGroups PeerEnumIdentities PeerFreeData PeerGetItemCount PeerGetNextItem PeerGroupAddRecord PeerGroupClose PeerGroupCloseDirectConnection PeerGroupConnect PeerGroupConnectByAddress PeerGroupCreate PeerGroupCreateInvitation PeerGroupCreatePasswordInvitation PeerGroupDelete PeerGroupDeleteRecord PeerGroupEnumConnections PeerGroupEnumMembers PeerGroupEnumRecords PeerGroupExportConfig PeerGroupExportDatabase PeerGroupGetEventData PeerGroupGetProperties PeerGroupGetRecord PeerGroupGetStatus PeerGroupImportConfig PeerGroupImportDatabase PeerGroupIssueCredentials PeerGroupJoin PeerGroupOpen PeerGroupOpenDirectConnection PeerGroupParseInvitation PeerGroupPasswordJoin PeerGroupPeerTimeToUniversalTime PeerGroupRegisterEvent PeerGroupResumePasswordAuthentication PeerGroupSearchRecords PeerGroupSendData PeerGroupSetProperties PeerGroupShutdown PeerGroupStartup PeerGroupUniversalTimeToPeerTime PeerGroupUnregisterEvent PeerGroupUpdateRecord PeerHostNameToPeerName PeerIdentityCreate PeerIdentityDelete PeerIdentityExport PeerIdentityGetCert PeerIdentityGetCryptKey PeerIdentityGetDefault PeerIdentityGetFriendlyName PeerIdentityGetXML PeerIdentityImport PeerIdentitySetFriendlyName PeerNameToPeerHostName PeerPnrpEndResolve PeerPnrpGetCloudInfo PeerPnrpGetEndpoint PeerPnrpRegister PeerPnrpResolve PeerPnrpShutdown PeerPnrpStartResolve PeerPnrpStartup PeerPnrpUnregister PeerPnrpUpdateRegistration PeerSSPAddCredentials PeerSSPRemoveCredentials

Name

.text

Size

911KB

Virtual Size

910KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

206KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

7ec087fb5c9ac0a2ed26f817ccbe872a_JaffaCakes118

gdi32

advapi32

kernel32

user32

comdlg32

generic