ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

General

Target
ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118
Size 320KB
Sample240823-e9h4pawand
SHA256 147ebcc44853cc5a776a50bb099177d4d87e00960aec208d2283f0b0c8c08b99
MD5 ba63ad4202ec9c9c9e16f2e6e6e13eed
SHA1 53a76c846bb0800264abc9a0c5f448da9b51f72f
SHA512 d359b89ccc3350ed2c1dff4c21e1bae1ada8a1a54324ed611a4d3ebfa577773d5d2cdb245104e8a921aaeb28eba31c49146e7b8c6e2d817a3042272e357c9e01
SSDEEP 3072:U4LaiXGwW6f3ny73vo0FbxbqOwO42GLSGL5UUoIPjgbgba5ytyiqNTPm+vld2hJk:UBrwXy7wvxSGGJIPje151vld3s5pd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

File Explorer

ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

.dll 320KB

ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

IMPHASH 0711eaedc93119f4fba09fc656e118ab
SHA256 147ebcc44853cc5a776a50bb099177d4d87e00960aec208d2283f0b0c8c08b99
MD5 ba63ad4202ec9c9c9e16f2e6e6e13eed
SHA1 53a76c846bb0800264abc9a0c5f448da9b51f72f
SHA512 d359b89ccc3350ed2c1dff4c21e1bae1ada8a1a54324ed611a4d3ebfa577773d5d2cdb245104e8a921aaeb28eba31c49146e7b8c6e2d817a3042272e357c9e01
SSDEEP 3072:U4LaiXGwW6f3ny73vo0FbxbqOwO42GLSGL5UUoIPjgbgba5ytyiqNTPm+vld2hJk:UBrwXy7wvxSGGJIPje151vld3s5pd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

generic

count=475, id=255, productName=VS2015 UPD2 build 23918, version=23918,

count=175, id=120, productName=VS2005 build 50727, version=50727,

count=425, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=482, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=108, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=346, id=261, productName=VS2015 UPD2 build 23918, version=23918,

count=463, id=147, productName=VS2008 build 21022, version=21022,

count=326, id=157, productName=VS2010 SP1 build 40219, version=40219,

count=223, id=258, productName=VS2017 v15.5.4 build 25834, version=25834,

count=197, id=223, productName=VS2013 UPD5 build 40629, version=40629,

count=264, id=259, productName=VS2015 UPD2 build 23918, version=23918,

count=447, id=207, productName=VS2012 UPD3 build 60610, version=60610,

count=175, id=1, productName=Unmarked objects,

count=25, productName=Unmarked objects (old),

count=107, id=259, productName=VS2015 UPD1 build 23506, version=23506,

ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

kernel32

rasapi32

advapi32

user32

oleaut32

generic

Sharing

General

Malware Config

Signatures

File Explorer

ba63ad4202ec9c9c9e16f2e6e6e13eed_JaffaCakes118

kernel32

rasapi32

advapi32

user32

oleaut32

generic