aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118
Size 156KB
Sample240820-t1cb4sscjd
SHA256 1df2679bbe22ef20720fd0052db9edc189f2f386f2f7b0fa0cbfb4114d70a9d5
MD5 aff9178403a81c1171f3f2905fd6caf1
SHA1 95506a962e583b0cd403acc6e5ab50ae4a122ffd
SHA512 1a3e3747e41924a7588b74c5644f826c6c76bcb3219ba4e20717f6d73ef14fca945862dd5bc6f695fd01ee5e69f2f5e77751d4e6105681fca740c9b5ca5fc59b
SSDEEP 3072:5ycBK7nvmVa495Nj21TFsJiN6MjtNfLX46oUDgBJlckko:Eu55hSciYMtyppckr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118

File Explorer

aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118

.exe 156KB

aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118

IMPHASH 868786ff891c55421d2b33ce0a31e671
SHA256 1df2679bbe22ef20720fd0052db9edc189f2f386f2f7b0fa0cbfb4114d70a9d5
MD5 aff9178403a81c1171f3f2905fd6caf1
SHA1 95506a962e583b0cd403acc6e5ab50ae4a122ffd
SHA512 1a3e3747e41924a7588b74c5644f826c6c76bcb3219ba4e20717f6d73ef14fca945862dd5bc6f695fd01ee5e69f2f5e77751d4e6105681fca740c9b5ca5fc59b
SSDEEP 3072:5ycBK7nvmVa495Nj21TFsJiN6MjtNfLX46oUDgBJlckko:Eu55hSciYMtyppckr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteFile SetFilePointer FlushFileBuffers GetFullPathNameA RtlUnwind GetTimeZoneInformation GetSystemTime GetLocalTime GetCommandLineA ExitProcess HeapAlloc HeapFree GetACP RaiseException HeapSize HeapReAlloc UnhandledExceptionFilter ReadFile FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr GetDriveTypeA GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetCurrentProcess GetCurrentDirectoryA GetOEMCP GetCPInfo GlobalFlags GetProcessVersion LoadLibraryA FreeLibrary lstrcatA GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom GetModuleHandleA GetProcAddress GetCurrentThreadId GetVersion TlsGetValue LocalReAlloc TlsSetValue GlobalAlloc GlobalReAlloc GlobalLock GlobalHandle GlobalUnlock GlobalFree TlsAlloc LocalAlloc lstrcmpA InterlockedExchange lstrcpynA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection FileTimeToLocalFileTime FileTimeToSystemTime LocalFree FindNextFileA lstrcpyA FindFirstFileA GetLastError SetLastError FindClose WideCharToMultiByte InterlockedDecrement InterlockedIncrement GetVersionExA GetModuleFileNameA GetPrivateProfileStringA GetPrivateProfileIntA WaitForSingleObject lstrlenA CreateDirectoryA WritePrivateProfileStringA Sleep MultiByteToWideChar DeleteFileA WinExec CreateToolhelp32Snapshot Process32First TerminateProcess OpenProcess Process32Next CloseHandle GetSystemDirectoryA GetTempPathA GetFileAttributesA FreeEnvironmentStringsA SetFileAttributesA

user32

MapWindowPoints PostMessageA LoadIconA SetWindowTextA LoadCursorA GetSysColorBrush ReleaseDC GetDC GetClassNameA PtInRect ClientToScreen PostQuitMessage DestroyMenu TabbedTextOutA DrawTextA GrayStringA GetClientRect CopyRect GetSysColor GetTopWindow GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetDlgItem GetWindowTextA GetDlgCtrlID DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetSystemMetrics GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem DispatchMessageA GetKeyState SendMessageA wsprintfA SetFocus CallNextHookEx PeekMessageA SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA EnableWindow UnhookWindowsHookEx LoadStringA AdjustWindowRectEx GetForegroundWindow

gdi32

SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx PtVisible RectVisible TextOutA ExtTextOutA Escape GetStockObject SelectObject RestoreDC SaveDC DeleteDC DeleteObject GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA LookupAccountNameA RegCreateKeyExA RegSetValueExA RegDeleteKeyA RegEnumKeyExA GetUserNameA RegOpenKeyExA RegDeleteValueA RegCloseKey InitializeAcl AllocateAndInitializeSid AddAccessAllowedAce SetNamedSecurityInfoA

shell32

SHFileOperationA ShellExecuteExA

comctl32

ord17

ole32

CoCreateInstance CoUninitialize CoInitialize

urlmon

URLDownloadToFileA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

wininet

InternetGetConnectedState

Sharing

General

Malware Config

Signatures

File Explorer

aff9178403a81c1171f3f2905fd6caf1_JaffaCakes118

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

urlmon

version

wininet

generic