89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118

General

Target
89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118
Size 220KB
Sample240811-hz14astfph
SHA256 3ff2bf40e040da35ae387f8c8528054e38247dc606d7185c0ec58e7c3927aead
MD5 89764d6eb50d6316d088b9451f0bc09d
SHA1 dc6ed468d633a3540a946c572f33ee8be0a56152
SHA512 9a87e9a3721fecb91193bc2fc9391ebfc0e91bf75df02c79afe50fc76f0fc904af7852c6f039e1963063181f59cbf028b71d8acf99efad887647be1f59a504fa
SSDEEP 3072:g4HH5jP0eoRauvy5MDN3pfPjwshdls+f44VK325tOBT6t3+JI:jAXyEfrdlQ4o3PYiI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118

File Explorer

89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118

.dll 220KB

89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118

IMPHASH 85c6bc9d028483b55f62dfe22f554199
SHA256 3ff2bf40e040da35ae387f8c8528054e38247dc606d7185c0ec58e7c3927aead
MD5 89764d6eb50d6316d088b9451f0bc09d
SHA1 dc6ed468d633a3540a946c572f33ee8be0a56152
SHA512 9a87e9a3721fecb91193bc2fc9391ebfc0e91bf75df02c79afe50fc76f0fc904af7852c6f039e1963063181f59cbf028b71d8acf99efad887647be1f59a504fa
SSDEEP 3072:g4HH5jP0eoRauvy5MDN3pfPjwshdls+f44VK325tOBT6t3+JI:jAXyEfrdlQ4o3PYiI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

67578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryW GetLastError CloseHandle GetSystemTime CreateEventW WaitForSingleObject MultiByteToWideChar GetProcAddress SystemTimeToFileTime GetFileAttributesW CreateFileW ReadFile GetCurrentDirectoryW LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FindClose SetFilePointer FindFirstFileW SetEndOfFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap RaiseException RtlUnwind GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle GetFileType GetStartupInfoA FlushFileBuffers GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleFileNameA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSection CompareStringA CompareStringW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA

advapi32

RegSetValueExW RegQueryValueExW RegDeleteValueW

ole32

CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

89764d6eb50d6316d088b9451f0bc09d_JaffaCakes118

kernel32

advapi32

ole32

generic