a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118
Size 80KB
Sample240817-244vjasdre
SHA256 ab93b72888121c843921975da69936fd5bcf24c01531f7a59b39ea546860236e
MD5 a48334eab4b2299ad2e8244a2c10e79f
SHA1 25279d00aea027b402477ec1428291196f732a6d
SHA512 a8c6a1daca8fb7e730341fb585b848a1f1050275d4d38c60e8b534460d3f6bcd7111f6187e88fc6343e044feb23dddc00e146c8658c45dcaf4d4d5f7ecc16ff8
SSDEEP 1536:uzzZ6LJ7bv4fVwunbC2VZz+sTK4xlly78Q0:lZ0fiunPX9TK4xlI7Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118

File Explorer

a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118

.exe 80KB

a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118

IMPHASH 0fc04452143ed6b94f7ce9997a49a725
SHA256 ab93b72888121c843921975da69936fd5bcf24c01531f7a59b39ea546860236e
MD5 a48334eab4b2299ad2e8244a2c10e79f
SHA1 25279d00aea027b402477ec1428291196f732a6d
SHA512 a8c6a1daca8fb7e730341fb585b848a1f1050275d4d38c60e8b534460d3f6bcd7111f6187e88fc6343e044feb23dddc00e146c8658c45dcaf4d4d5f7ecc16ff8
SSDEEP 1536:uzzZ6LJ7bv4fVwunbC2VZz+sTK4xlly78Q0:lZ0fiunPX9TK4xlI7Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA FreeLibrary SetErrorMode GetTempPathA RemoveDirectoryA GetModuleFileNameA GetShortPathNameA GetVersionExA CompareStringW CompareStringA GetOEMCP GetACP GetCPInfo GetStringTypeW GetStringTypeA GetProcAddress IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter lstrlenA GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter LCMapStringW LCMapStringA MultiByteToWideChar WideCharToMultiByte IsBadWritePtr VirtualAlloc GetExitCodeProcess GetCurrentDirectoryA SetCurrentDirectoryA CreateProcessA Sleep GetTimeZoneInformation lstrcatA WinExec CloseHandle SetFilePointer WriteFile GetSystemDirectoryA ReadFile CreateFileA GetLastError FindFirstFileA FindClose VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetVersion GetCommandLineA GetStartupInfoA GetModuleHandleA GetWindowsDirectoryA GetFileType SetFileAttributesA GetFileAttributesA ExitProcess TerminateProcess GetCurrentProcess HeapCompact HeapAlloc HeapReAlloc HeapFree RtlUnwind DeleteFileA FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime SetEnvironmentVariableA

user32

SendMessageA GetWindow GetSystemMetrics CreateWindowExA LoadIconA LoadCursorA RegisterClassA CreateDialogParamA GetDlgItem DestroyWindow PostQuitMessage DefWindowProcA CharToOemA DialogBoxParamA EndDialog SetDlgItemTextA PeekMessageA TranslateMessage DispatchMessageA GetMessageA IsDialogMessageA SetWindowLongA SetWindowTextA MessageBoxA wsprintfA

gdi32

DeleteObject RemoveFontResourceA GetObjectA CreateFontIndirectA GetStockObject

advapi32

RegSetValueExA RegQueryValueExA RegEnumKeyExA RegDeleteKeyA RegDeleteValueA RegOpenKeyA RegQueryValueA RegOpenKeyExA RegCloseKey

shell32

SHGetPathFromIDListA ShellExecuteA SHGetSpecialFolderLocation SHGetMalloc

ole32

OleUninitialize OleInitialize

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

a48334eab4b2299ad2e8244a2c10e79f_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

generic