918ec60cf64e169e449ebac4f6185a04_JaffaCakes118

General

Target
918ec60cf64e169e449ebac4f6185a04_JaffaCakes118
Size 156KB
Sample240813-erpthsydln
SHA256 0cccbc24a88e2550c51dcddcd59d8bd7bc93ad70c87cdf6b227208f01034e586
MD5 918ec60cf64e169e449ebac4f6185a04
SHA1 10372b0c44f180166dd725f492edd22f6ac5dbc2
SHA512 8ee819e1e7ec75739cfab92308771483cfe3c3a4b23beeb52189d7f8f65dcd817434bcf89e5d1653101fffa2437134cd547667883e997ef29b611ed1835c49ab
SSDEEP 1536:vByRsHaqTlSUl41dB29VJlq6RLdky6C6l7BLmOtNCL0PiWTHV0DgSKuBpj/LyTd:0SHVlSxdWVLdSl75jvPiAHV0EM/Lyh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
918ec60cf64e169e449ebac4f6185a04_JaffaCakes118

File Explorer

918ec60cf64e169e449ebac4f6185a04_JaffaCakes118

.exe 156KB

918ec60cf64e169e449ebac4f6185a04_JaffaCakes118

IMPHASH 5b7ad7a806881f2fe23db03654dee024
SHA256 0cccbc24a88e2550c51dcddcd59d8bd7bc93ad70c87cdf6b227208f01034e586
MD5 918ec60cf64e169e449ebac4f6185a04
SHA1 10372b0c44f180166dd725f492edd22f6ac5dbc2
SHA512 8ee819e1e7ec75739cfab92308771483cfe3c3a4b23beeb52189d7f8f65dcd817434bcf89e5d1653101fffa2437134cd547667883e997ef29b611ed1835c49ab
SSDEEP 1536:vByRsHaqTlSUl41dB29VJlq6RLdky6C6l7BLmOtNCL0PiWTHV0DgSKuBpj/LyTd:0SHVlSxdWVLdSl75jvPiAHV0EM/Lyh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\bmMRlFrvsV\bmMRlFrvsV.pdb

kernel32

LoadLibraryA GetModuleHandleA GetTickCount GetLastError CompareStringW CompareStringA GetLocaleInfoW CloseHandle HeapFree ExitProcess GetStartupInfoA GetCommandLineA GetVersionExA HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc IsBadWritePtr QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetProcAddress TerminateProcess GetCurrentProcess WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc SetLastError GetCurrentThread TlsFree TlsSetValue TlsGetValue InitializeCriticalSection RtlUnwind InterlockedExchange VirtualQuery SetFilePointer GetACP GetOEMCP GetCPInfo SetStdHandle HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage FlushFileBuffers VirtualProtect GetSystemInfo GetTimeZoneInformation SetEnvironmentVariableA

user32

wsprintfA wvsprintfA GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

918ec60cf64e169e449ebac4f6185a04_JaffaCakes118

kernel32

user32

generic