95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118

General

Target
95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118
Size 169KB
Sample240814-m8ezmstdjr
SHA256 66f5c251d8ccd72416c5be91580e1555787594d7d1430201a2e568b8e902a490
MD5 95d895f7981b23d39a81fe056b0c6a4d
SHA1 7d4c1e478c6ddbb595bd51ab56ee9a9b08662e7f
SHA512 e7f7c38c616ff677e41fc169f7d3557b33992b70295ebd3e12736c40ae5c12b19e24df8f3f53f997d77c13c635db5a1e85f0425b556262448f1fa2bbfeefb63f
SSDEEP 3072:CuLDBVRdO9E4jHnoktxwkCKDmmzk2hoRJdqtFEHTbsM8:CuLDOzoJkJa2h0duEHXL8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118

File Explorer

95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118

.exe 169KB

95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118

IMPHASH d9d77a70ba15840a5751fd03111bca89
SHA256 66f5c251d8ccd72416c5be91580e1555787594d7d1430201a2e568b8e902a490
MD5 95d895f7981b23d39a81fe056b0c6a4d
SHA1 7d4c1e478c6ddbb595bd51ab56ee9a9b08662e7f
SHA512 e7f7c38c616ff677e41fc169f7d3557b33992b70295ebd3e12736c40ae5c12b19e24df8f3f53f997d77c13c635db5a1e85f0425b556262448f1fa2bbfeefb63f
SSDEEP 3072:CuLDBVRdO9E4jHnoktxwkCKDmmzk2hoRJdqtFEHTbsM8:CuLDOzoJkJa2h0duEHXL8
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

B:\Temp\dPE\Release\dPE.pdb

ole32

CoUninitialize CoInitialize

user32

ShowWindow LoadAcceleratorsW EndDialog PostQuitMessage GetDesktopWindow EndPaint BeginPaint DefWindowProcW DestroyWindow DialogBoxParamW GetClientRect UpdateWindow GetMessageW CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW LoadStringW

dbghelp

ImageNtHeader

kernel32

DeleteCriticalSection LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA WideCharToMultiByte GetLocaleInfoA HeapSize RtlUnwind HeapReAlloc HeapAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount VirtualQuery VirtualAlloc VirtualProtect VirtualFree LoadLibraryA GetProcAddress GetModuleHandleA FindResourceExW SizeofResource LoadResource LockResource FreeResource GetStartupInfoW SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection

Sharing

General

Malware Config

Signatures

File Explorer

95d895f7981b23d39a81fe056b0c6a4d_JaffaCakes118

ole32

user32

dbghelp

kernel32

generic