b5914deba401e1e9ac183f4239e3c150_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b5914deba401e1e9ac183f4239e3c150_JaffaCakes118
Size 456KB
Sample240822-ab22paxfkb
SHA256 2550587a44d98ddf8643d937fa4b9799e3df1889f7fd52f88643de8e20ccb927
MD5 b5914deba401e1e9ac183f4239e3c150
SHA1 b55b0d55f88ecaa8b0766957324c5029f21bde93
SHA512 1a4f6a2bbcf78289729171a5abced234b1f7510cfd3f3fbc3424a11eca53e9664ca2a1317e569b6a06678e3b31d1fa3975f9abe26b418ed2af1e3ce170d1aae6
SSDEEP 12288:Thz2CTUSJwndhZtoCa+7X5ahlJ3zZUPKN:95T4ak5ClJ3WPK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5914deba401e1e9ac183f4239e3c150_JaffaCakes118

File Explorer

b5914deba401e1e9ac183f4239e3c150_JaffaCakes118

.exe 456KB

b5914deba401e1e9ac183f4239e3c150_JaffaCakes118

IMPHASH a8070c6ad7600bbdd417216375913d93
SHA256 2550587a44d98ddf8643d937fa4b9799e3df1889f7fd52f88643de8e20ccb927
MD5 b5914deba401e1e9ac183f4239e3c150
SHA1 b55b0d55f88ecaa8b0766957324c5029f21bde93
SHA512 1a4f6a2bbcf78289729171a5abced234b1f7510cfd3f3fbc3424a11eca53e9664ca2a1317e569b6a06678e3b31d1fa3975f9abe26b418ed2af1e3ce170d1aae6
SSDEEP 12288:Thz2CTUSJwndhZtoCa+7X5ahlJ3zZUPKN:95T4ak5ClJ3WPK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageA PropertySheetA

kernel32

GetTempFileNameA GetTempPathA GetModuleHandleA ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority CreateProcessA GetModuleFileNameA DeleteFileA RemoveDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA SetLastError CreateDirectoryA GetFileAttributesA GetFileSize CreateFileA CreateFileMappingA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange CloseHandle SetFileTime DosDateTimeToFileTime GetLastError FormatMessageA LocalFree FreeLibrary MultiByteToWideChar LoadLibraryA GetProcAddress lstrlenA MapViewOfFile UnmapViewOfFile

user32

MessageBoxA GetFocus wsprintfA SetCursor GetDlgItem SendDlgItemMessageA GetParent PostMessageA GetWindowRect MoveWindow LoadCursorA RegisterClassA CreateWindowExA ShowWindow UpdateWindow DefWindowProcA BeginPaint GetSystemMetrics EndPaint PeekMessageA TranslateMessage DispatchMessageA GetDC ReleaseDC SendMessageA SetDlgItemTextA

gdi32

SetBkMode SetTextColor DeleteObject CreateDIBitmap SelectObject CreateFontA CreateSolidBrush TextOutA

advapi32

RegCloseKey RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegQueryValueA

ole32

CoCreateInstance CoInitialize CoUninitialize

msvcr80

_unlock __dllonexit _lock _onexit _decode_pointer _except_handler4_common _invoke_watson _controlfp_s _strnicmp _stricmp _close _read _open _strdup _crt_debugger_hook __set_app_type _encode_pointer strchr memcpy memset strncat strcat strlen strcpy _localtime64 _time64 strtol free malloc _putenv _fstat64i32 fprintf __iob_func remove fread ftell fseek fopen fclose fflush freopen _snprintf strncpy strcmp strrchr _vsnprintf sscanf fwrite strftime sprintf isspace qsort realloc fgets strncmp __argv __argc _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _tempnam

Sharing

General

Malware Config

Signatures

File Explorer

b5914deba401e1e9ac183f4239e3c150_JaffaCakes118

comctl32

kernel32

user32

gdi32

advapi32

ole32

msvcr80

generic