beefeb74d14a81473744066698f53fc8_JaffaCakes118

General

Target
beefeb74d14a81473744066698f53fc8_JaffaCakes118
Size 105KB
Sample240824-tcb2faxfja
SHA256 4d11d6c4577755a62ab26843afb033773efdb34e15c3178531b62b85de3c5e70
MD5 beefeb74d14a81473744066698f53fc8
SHA1 5ea34d4a7ece25bb1bd401f9601b62b099bb46b6
SHA512 0f8f0454647def43e9347ff90ae44b39002cc8acc2dc7bf34067d631412fd30159c6c225ff696ca3f907beef3b517c1b28adeb40c28be3c7639b4bb6fda3e659
SSDEEP 3072:unVM//LTEUFQhGqQEP2+GldjyJcwvTj2MIj:p/fLarQEO+u6sMw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beefeb74d14a81473744066698f53fc8_JaffaCakes118

File Explorer

beefeb74d14a81473744066698f53fc8_JaffaCakes118

.dll 105KB

beefeb74d14a81473744066698f53fc8_JaffaCakes118

IMPHASH c711097dfcef30b95a2eafd5d4fb531b
SHA256 4d11d6c4577755a62ab26843afb033773efdb34e15c3178531b62b85de3c5e70
MD5 beefeb74d14a81473744066698f53fc8
SHA1 5ea34d4a7ece25bb1bd401f9601b62b099bb46b6
SHA512 0f8f0454647def43e9347ff90ae44b39002cc8acc2dc7bf34067d631412fd30159c6c225ff696ca3f907beef3b517c1b28adeb40c28be3c7639b4bb6fda3e659
SSDEEP 3072:unVM//LTEUFQhGqQEP2+GldjyJcwvTj2MIj:p/fLarQEO+u6sMw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

44361

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetComputerNameW LocalAlloc LocalFree SetUnhandledExceptionFilter GetLocalTime UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange DisableThreadLibraryCalls WriteProfileStringW lstrcmpiW lstrlenW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentThreadId GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapSize LoadLibraryA FormatMessageW CreateProcessW CloseHandle WaitForSingleObject InterlockedIncrement VirtualProtect InterlockedDecrement GetCommandLineA QueryPerformanceCounter HeapReAlloc VirtualAlloc RtlUnwind GetVersionExA VirtualQuery ExitProcess GetProcAddress GetModuleHandleA SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA HeapDestroy HeapCreate VirtualFree HeapFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW HeapAlloc GetACP GetOEMCP GetCPInfo GetSystemInfo

user32

SendNotifyMessageW GetParent DefDlgProcW LoadStringW SendMessageW EnableWindow ShowWindow GetDlgItem

advapi32

RegOpenKeyW RegQueryValueExW RegEnumValueW RegCreateKeyExW RegSetValueExW RegDeleteKeyW RegOpenKeyExW RegCloseKey

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

beefeb74d14a81473744066698f53fc8_JaffaCakes118

kernel32

user32

advapi32

ole32

generic