b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118
Size 648KB
Sample240822-1bpdps1epk
SHA256 a060c51c947826d373d497bbb99dc335f97fdfae70fe450970a63aa4fee10b75
MD5 b936343378e1002858bbc6edf0aaa9e9
SHA1 97ce76c0b2347b5dc0a9e480dbd9a7983ae2a50b
SHA512 e2557cba2abdf7218a88b5f7121312495dbfc506d41f289433da97abe80c54947a1a962b7318dc46dcfc6d3b20ae72debee3cb344385a86a1c3933185b6a84e9
SSDEEP 12288:YZ9XdYxzDdhM4zpZVQJG+Xu98o6GXW0KOQSB1h1UO3nkU0:YZ9XdYxzDdhM4z1QJG+XuuGXW0ISHNn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118

File Explorer

b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118

.exe 648KB

b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118

IMPHASH af73f4d72a0665f4a3ee8ff373e184c2
SHA256 a060c51c947826d373d497bbb99dc335f97fdfae70fe450970a63aa4fee10b75
MD5 b936343378e1002858bbc6edf0aaa9e9
SHA1 97ce76c0b2347b5dc0a9e480dbd9a7983ae2a50b
SHA512 e2557cba2abdf7218a88b5f7121312495dbfc506d41f289433da97abe80c54947a1a962b7318dc46dcfc6d3b20ae72debee3cb344385a86a1c3933185b6a84e9
SSDEEP 12288:YZ9XdYxzDdhM4zpZVQJG+Xu98o6GXW0KOQSB1h1UO3nkU0:YZ9XdYxzDdhM4z1QJG+XuuGXW0ISHNn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

DragQueryFile ExtractIconW SHBrowseForFolderW ShellExecuteExA SHGetSettings

user32

RegisterClassA EnumPropsExW RegisterClassExA IsWindowEnabled SetCursorPos GetClipboardFormatNameW

advapi32

CryptReleaseContext RegQueryMultipleValuesW RegReplaceKeyA RegDeleteValueW RegSaveKeyW StartServiceA RegRestoreKeyA CryptAcquireContextA LookupPrivilegeValueW RegQueryValueExW RegConnectRegistryA CryptHashSessionKey RegSetValueW

comctl32

InitCommonControlsEx

kernel32

TlsFree InterlockedDecrement VirtualQuery GetCommandLineA GetLastError CloseHandle GetSystemTimeAsFileTime ReadFile FreeEnvironmentStringsA GetFileType SetFilePointer GetCurrentProcessId IsBadWritePtr GetCurrentThreadId WideCharToMultiByte GetStdHandle DeleteCriticalSection CompareStringW GetSystemTime GetModuleFileNameA TerminateProcess HeapAlloc GetVersion GetModuleHandleA RtlUnwind LeaveCriticalSection GetOEMCP GetLocalTime SetLastError HeapCreate CompareStringA LoadLibraryA SetEnvironmentVariableA LCMapStringA InterlockedExchange GetEnvironmentStringsW TlsSetValue InitializeCriticalSection SetHandleCount EnterCriticalSection GetStartupInfoA GetCurrentThread GetDiskFreeSpaceExW CreateMutexA ExitProcess HeapReAlloc QueryPerformanceCounter SetStdHandle GetStringTypeW GetTickCount GetProcAddress LCMapStringW GetStringTypeA GetEnvironmentStrings MultiByteToWideChar HeapFree FreeEnvironmentStringsW WriteFile VirtualAlloc InterlockedIncrement VirtualFree OpenMutexA GetACP TlsAlloc GetTimeZoneInformation HeapDestroy GetCPInfo UnhandledExceptionFilter GetCurrentProcess FlushFileBuffers TlsGetValue

Sharing

General

Malware Config

Signatures

File Explorer

b936343378e1002858bbc6edf0aaa9e9_JaffaCakes118

shell32

user32

advapi32

comctl32

kernel32

generic