c03f2394406a8a65dc61c237966a368b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c03f2394406a8a65dc61c237966a368b_JaffaCakes118
Size 692KB
Sample240825-jcl7assfla
SHA256 feaf6f45fec197f8e77a73763272de880cd00b91eb22f6b2363a61e9bcab0df1
MD5 c03f2394406a8a65dc61c237966a368b
SHA1 90fb3aaccf2eeb4d5bc453feb081056baa9f3798
SHA512 fee81fda0516708180e4e88575415a0aaa3d86b58a1b9761a67c578245bd8799937124ecf17c81b827b9eb124e473418d22d32eb15f8372de22a376cd961b4ce
SSDEEP 12288:vk+tg1m5/Gk3ZtO8HK69IOds7aYA4R9DceKIj5QfcAswiw75TI:vkQsm9J0IK6Nu73w0j5QEAR5T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c03f2394406a8a65dc61c237966a368b_JaffaCakes118

File Explorer

c03f2394406a8a65dc61c237966a368b_JaffaCakes118

.exe 692KB

c03f2394406a8a65dc61c237966a368b_JaffaCakes118

IMPHASH d8de667204545f9c4ebd3881f64724de
SHA256 feaf6f45fec197f8e77a73763272de880cd00b91eb22f6b2363a61e9bcab0df1
MD5 c03f2394406a8a65dc61c237966a368b
SHA1 90fb3aaccf2eeb4d5bc453feb081056baa9f3798
SHA512 fee81fda0516708180e4e88575415a0aaa3d86b58a1b9761a67c578245bd8799937124ecf17c81b827b9eb124e473418d22d32eb15f8372de22a376cd961b4ce
SSDEEP 12288:vk+tg1m5/Gk3ZtO8HK69IOds7aYA4R9DceKIj5QfcAswiw75TI:vkQsm9J0IK6Nu73w0j5QEAR5T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

58989

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\bqajc\elobi\ecoa\eextvtsec\bjhesepot.pdb

user32

GetWindowLongW GetSystemMenu InsertMenuW GetActiveWindow GetClientRect WaitForInputIdle IsWindowVisible GetWindowTextLengthW MessageBeep SetCapture SetForegroundWindow SetParent IsRectEmpty TrackPopupMenu ScreenToClient CallNextHookEx GetKeyNameTextW RegisterClassW PtInRect EnableWindow UpdateWindow GetSystemMetrics CreateWindowExW GetWindowTextW GetCapture GetSubMenu CheckDlgButton TrackPopupMenuEx IsChild InvalidateRect DefWindowProcW DestroyWindow GetMenuItemCount GetClassNameW IsZoomed ShowWindow DrawIcon AdjustWindowRectEx GetSysColor IsMenu SetMenuDefaultItem GetCursorPos SetFocus RegisterClassExW GetSysColorBrush EnumWindows UnregisterClassW GetWindowDC SetWindowPlacement GetFocus MessageBoxW DestroyIcon LoadCursorW SetWindowTextW GetMessagePos CharNextW GetMenuItemID GetKeyState ClientToScreen KillTimer

gdi32

GetGlyphOutlineA ArcTo SelectClipPath Escape SetMapperFlags SelectPalette CreateDIBPatternBrushPt SetArcDirection Polyline GetBitmapDimensionEx CreateEllipticRgnIndirect BeginPath GetObjectType PtInRegion PatBlt EqualRgn FloodFill ScaleWindowExtEx RectVisible GetClipBox GetDCOrgEx CopyMetaFileA SetPixel GetPaletteEntries RealizePalette SetAbortProc PaintRgn PlayMetaFileRecord CreateMetaFileA CreateRoundRectRgn SetWindowOrgEx SetBrushOrgEx OffsetRgn MoveToEx PlayEnhMetaFile GetObjectA SelectClipRgn CreatePalette InvertRgn GetOutlineTextMetricsA ExtCreatePen GetTextCharacterExtra CreateBitmap GetArcDirection CloseEnhMetaFile SetColorAdjustment CloseMetaFile StrokeAndFillPath GetNearestPaletteIndex GetTextExtentPointA ScaleViewportExtEx EndPath DeleteDC LPtoDP GetNearestColor GetViewportOrgEx CreateEnhMetaFileA GetRegionData RoundRect IntersectClipRect ExtCreateRegion OffsetViewportOrgEx CreateCompatibleBitmap FillRgn Ellipse PolyDraw CreateCompatibleDC GetTextFaceA DPtoLP EnumMetaFile PolylineTo StretchDIBits SetBitmapDimensionEx StartDocA GetTextColor

kernel32

SetUnhandledExceptionFilter SetFilePointer UnhandledExceptionFilter EnterCriticalSection GetModuleHandleA GetEnvironmentStringsW GetCurrentThreadId ReadFile GetTimeZoneInformation CreateMutexW HeapAlloc FlushFileBuffers GetSystemTime RaiseException GetStringTypeA GetTickCount ExitProcess CloseHandle InitializeCriticalSection WideCharToMultiByte GetCommandLineA IsBadWritePtr HeapDestroy SetHandleCount FatalAppExitA GetStdHandle GetCurrentThread InterlockedDecrement GetEnvironmentStrings CompareStringW InterlockedExchange HeapReAlloc LCMapStringA GetCurrentProcessId IsBadReadPtr GetFileType GetVersion TerminateProcess GetLocalTime CompareStringA GetModuleFileNameA GetModuleFileNameW GetModuleHandleW DeleteCriticalSection FreeEnvironmentStringsW GetCPInfo InterlockedIncrement HeapCreate GetCommandLineW VirtualFree FreeEnvironmentStringsA GetProcAddress SetLastError TlsFree IsBadCodePtr LoadLibraryA GetCurrentProcess VirtualAlloc HeapFree SetConsoleCtrlHandler VirtualQuery QueryPerformanceCounter MultiByteToWideChar GetLastError GetStartupInfoW TlsAlloc LCMapStringW GetSystemTimeAsFileTime TlsGetValue SetStdHandle SetEnvironmentVariableA WriteFile GetStringTypeW RtlUnwind LeaveCriticalSection GetStartupInfoA TlsSetValue

advapi32

RegEnumKeyA RegQueryValueA RegDeleteValueA RegCreateKeyExA RegOpenKeyExA OpenProcessToken RegOpenKeyA

oleaut32

LoadTypeLi

Sharing

General

Malware Config

Signatures

File Explorer

c03f2394406a8a65dc61c237966a368b_JaffaCakes118

user32

gdi32

kernel32

advapi32

oleaut32

generic