acb68df4a6f6fdc1c944d51997592583_JaffaCakes118

General

Target
acb68df4a6f6fdc1c944d51997592583_JaffaCakes118
Size 220KB
Sample240819-1pr2ra1glp
SHA256 d3c9b9804d7921ea97875cff946f0258ded50b1f8d7539df5ba1d978a8fa3d43
MD5 acb68df4a6f6fdc1c944d51997592583
SHA1 03a5ce1fcd0317b459c0579e2714ab446d26e78d
SHA512 31fbb1fedb072584e928b288ab8163c01449e7ed16f249528cfe7c93900cd3f302edd34febf259328d18c6af6c6db2382ff6145272432ff7e3d96bef091207d5
SSDEEP 6144:dkhmAFFxmRMInBle75fc5jHdGatrsRhkD:dTU7In3e75fs9GpRhkD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acb68df4a6f6fdc1c944d51997592583_JaffaCakes118

File Explorer

acb68df4a6f6fdc1c944d51997592583_JaffaCakes118

.exe 220KB

acb68df4a6f6fdc1c944d51997592583_JaffaCakes118

IMPHASH 7a2b77b86db9f0cb7835b5a26c6924de
SHA256 d3c9b9804d7921ea97875cff946f0258ded50b1f8d7539df5ba1d978a8fa3d43
MD5 acb68df4a6f6fdc1c944d51997592583
SHA1 03a5ce1fcd0317b459c0579e2714ab446d26e78d
SHA512 31fbb1fedb072584e928b288ab8163c01449e7ed16f249528cfe7c93900cd3f302edd34febf259328d18c6af6c6db2382ff6145272432ff7e3d96bef091207d5
SSDEEP 6144:dkhmAFFxmRMInBle75fc5jHdGatrsRhkD:dTU7In3e75fs9GpRhkD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8555

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Oracle\CC.pdb

kernel32

GetProcAddress LoadLibraryA GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA SetUnhandledExceptionFilter GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar GetLocaleInfoA GetLocaleInfoW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

acb68df4a6f6fdc1c944d51997592583_JaffaCakes118

kernel32

generic