86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118
Size 97KB
Sample240810-ttdllaxdnk
SHA256 7a26b9c65440bbe56916799ec55576a6b3b7fcec9143196f2e1c49a4d6869f13
MD5 86c6e2f97cdb9b2f5fdd6e06a5e5bed6
SHA1 68a3a4edd0567619231a53b3f6ac522ee15fe5c3
SHA512 961290758e93b9a71d4284bcc2686c88bad03800933ff9b311cf22b05f9011dc0e8efb500fabb4d72da15f4b57aaff15a7f8d549dd34f3068028de68c5924fb0
SSDEEP 1536:JMqzW7JoS7qxgY96riqT2KazWkokkkkkkotV74wooR4kOzyBqFJ:J5OK1bzWkokkkkkkcVUwooRROzyYF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118

File Explorer

86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118

.dll 97KB

86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118

IMPHASH aea51930199aaff92ff49fbe15f0da97
SHA256 7a26b9c65440bbe56916799ec55576a6b3b7fcec9143196f2e1c49a4d6869f13
MD5 86c6e2f97cdb9b2f5fdd6e06a5e5bed6
SHA1 68a3a4edd0567619231a53b3f6ac522ee15fe5c3
SHA512 961290758e93b9a71d4284bcc2686c88bad03800933ff9b311cf22b05f9011dc0e8efb500fabb4d72da15f4b57aaff15a7f8d549dd34f3068028de68c5924fb0
SSDEEP 1536:JMqzW7JoS7qxgY96riqT2KazWkokkkkkkotV74wooR4kOzyBqFJ:J5OK1bzWkokkkkkkcVUwooRROzyYF
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

MultiByteToWideChar lstrlenA SizeofResource LoadResource FindResourceW GetLastError LoadLibraryExW lstrcmpiW lstrcpynW DisableThreadLibraryCalls InitializeCriticalSection HeapDestroy DeleteCriticalSection lstrcpyW lstrcatW InterlockedIncrement GetCurrentThreadId FreeLibrary GlobalFindAtomW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetStringTypeW GetStringTypeA GetModuleFileNameW GetModuleHandleW GetShortPathNameW EnterCriticalSection LeaveCriticalSection lstrlenW GetCurrentProcess FlushInstructionCache GlobalAddAtomW InterlockedDecrement LCMapStringW LCMapStringA IsBadCodePtr LoadLibraryA GetProcAddress GetOEMCP GetACP GetCPInfo SetUnhandledExceptionFilter WriteFile GetStartupInfoA GetFileType GetStdHandle SetHandleCount TerminateProcess SetLastError TlsFree TlsAlloc LocalFree HeapFree HeapAlloc HeapReAlloc TlsSetValue TlsGetValue GetCommandLineA GetVersion RaiseException GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapCreate VirtualFree VirtualAlloc ExitProcess RtlUnwind GetEnvironmentStringsW

user32

KillTimer CallWindowProcW CharNextW SetTimer DefWindowProcW GetWindowLongW SetWindowLongW GetClassInfoExW LoadCursorW wsprintfW RegisterClassExW CreateWindowExW ShowWindow GetClientRect IsWindow

advapi32

RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegOpenKeyExW RegCloseKey RegDeleteValueW RegCreateKeyExW RegDeleteKeyW RegEnumValueW

shell32

SHLoadInProc StrStrIW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance StringFromGUID2 CoInitialize OleRun CoTaskMemFree

oleaut32

LoadTypeLi RegisterTypeLi VarUI4FromStr SysStringLen LoadRegTypeLi DispCallFunc VariantClear SysAllocString SysFreeString GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

86c6e2f97cdb9b2f5fdd6e06a5e5bed6_JaffaCakes118

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic