a0463767d49f2155945e8241b201311d_JaffaCakes118

General

Target
a0463767d49f2155945e8241b201311d_JaffaCakes118
Size 569KB
Sample240816-2yctvssend
SHA256 203226f68145d1aa2dff7460f38219ae7f2dff19df24da918857a13c43e422d4
MD5 a0463767d49f2155945e8241b201311d
SHA1 dea4086c52bc7360780ce22ea22efe3a40bb2ab2
SHA512 f8b9dc18d932440c88bcd6c3ef502c815c37a9b76814e6df39ce671f1cdc03627a3e6259ccbb8f9319ecee3f58006a50571d15d6335cfd0b7a63dbb29727b596
SSDEEP 12288:I76gZeCw2MFcjQHUAAGmwBG3tZVri/dA+FHiPQTQ1gUsLl/zaBgQaO1meI1vKM:mdw2M+jWmwBG3tZVrCiP2aiegv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0463767d49f2155945e8241b201311d_JaffaCakes118

File Explorer

a0463767d49f2155945e8241b201311d_JaffaCakes118

.exe 569KB

a0463767d49f2155945e8241b201311d_JaffaCakes118

IMPHASH d2aba3217e75fbed727c95152431ac3e
SHA256 203226f68145d1aa2dff7460f38219ae7f2dff19df24da918857a13c43e422d4
MD5 a0463767d49f2155945e8241b201311d
SHA1 dea4086c52bc7360780ce22ea22efe3a40bb2ab2
SHA512 f8b9dc18d932440c88bcd6c3ef502c815c37a9b76814e6df39ce671f1cdc03627a3e6259ccbb8f9319ecee3f58006a50571d15d6335cfd0b7a63dbb29727b596
SSDEEP 12288:I76gZeCw2MFcjQHUAAGmwBG3tZVri/dA+FHiPQTQ1gUsLl/zaBgQaO1meI1vKM:mdw2M+jWmwBG3tZVrCiP2aiegv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW CreateMutexW SetFilePointer lstrlenA BuildCommDCBAndTimeoutsA FreeLibrary LocalCompact SetUnhandledExceptionFilter GetCommState ReadConsoleA InterlockedDecrement SetConsoleActiveScreenBuffer SetEnvironmentVariableW CreateJobObjectW WaitForSingleObject CallNamedPipeW SetTapeParameters GetProcessPriorityBoost GetModuleHandleW LocalFlags FindNextVolumeMountPointA GetPriorityClass ActivateActCtx CopyFileW GetSystemPowerStatus WritePrivateProfileStructW GetBinaryTypeA lstrcatA GetACP ExitThread DisconnectNamedPipe GetNamedPipeHandleStateW IsDBCSLeadByteEx SetLastError GetProcAddress ReadFileEx SetStdHandle GetConsoleDisplayMode EnterCriticalSection GetLocalTime LoadLibraryA LocalAlloc IsSystemResumeAutomatic SetFileApisToANSI FindAtomA GetPrivateProfileStructA GetCurrentDirectoryA OpenSemaphoreW GetProfileSectionW lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection HeapAlloc GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

a0463767d49f2155945e8241b201311d_JaffaCakes118

kernel32

winhttp

generic