c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118
Size 68KB
Sample240825-ljkcdsyfpr
SHA256 08c7b08dce65226d83db5e1d68ef9930965a45d0fa442bf430571834c32c2246
MD5 c072f017c271cb7540aa1a233bec9a5c
SHA1 5347201b0ec14088e59b896e7648d35d02934204
SHA512 c956a731a233c6946b4f46a5d9c1bca1f8537ded74c360542157d2b08a84eba642b90676077d9c96917f4159e21a91d214d05907b1e7e0dc4cfb4824d9a78952
SSDEEP 1536:WnDkw0KkbVENDUNrxEAkfJ+TcTLGtvbJSF9Os:WQDVENYNNfWJ+jvbJSF9O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118

File Explorer

c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118

.dll 68KB

c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118

IMPHASH 9fd2c4024db4113d3c370a1183fb601e
SHA256 08c7b08dce65226d83db5e1d68ef9930965a45d0fa442bf430571834c32c2246
MD5 c072f017c271cb7540aa1a233bec9a5c
SHA1 5347201b0ec14088e59b896e7648d35d02934204
SHA512 c956a731a233c6946b4f46a5d9c1bca1f8537ded74c360542157d2b08a84eba642b90676077d9c96917f4159e21a91d214d05907b1e7e0dc4cfb4824d9a78952
SSDEEP 1536:WnDkw0KkbVENDUNrxEAkfJ+TcTLGtvbJSF9Os:WQDVENYNNfWJ+jvbJSF9O
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

advapi32

RegDeleteKeyA RegCreateKeyExA RegDeleteValueA RegCloseKey RegOpenKeyExA RegEnumKeyExA RegSetValueExA RegQueryInfoKeyA RegEnumValueA RegFlushKey RegQueryValueExA

kernel32

lstrcatA lstrcpynA lstrlenA ReleaseMutex WaitForSingleObject GetCurrentProcessId GetTickCount lstrcmpA CreateDirectoryA GetModuleFileNameA GetLastError lstrcpyA GetExitCodeProcess WriteFile ReadFile GetFileSize CreateFileA CreateProcessA DeleteFileA InitializeCriticalSection DeleteCriticalSection CreateThread LeaveCriticalSection EnterCriticalSection DisableThreadLibraryCalls HeapAlloc GetSystemInfo GetVersionExA HeapCreate InterlockedIncrement InterlockedDecrement FlushInstructionCache GetCurrentProcess lstrlenW MultiByteToWideChar GetShortPathNameA GetModuleHandleA WideCharToMultiByte FreeLibrary SizeofResource LoadResource CreateMutexA LoadLibraryExA lstrcmpiA IsDBCSLeadByte HeapDestroy GetProcAddress LoadLibraryA GetUserDefaultLangID CompareFileTime SystemTimeToFileTime GetLocalTime CopyFileA DebugBreak HeapReAlloc HeapFree SetLastError SetFileAttributesA SetCurrentDirectoryA MoveFileA LockResource FlushFileBuffers SetFilePointer SetThreadPriority ResumeThread WritePrivateProfileSectionA GetPrivateProfileIntA GetPrivateProfileStringA SetEvent ResetEvent CreateEventA GetDriveTypeA GetFileAttributesA GetCurrentDirectoryA GetSystemDirectoryA WaitForMultipleObjects WritePrivateProfileStringA UnmapViewOfFile MapViewOfFile CreateFileMappingA GetCurrentThreadId CloseHandle FindResourceA

ole32

CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoCreateGuid StringFromGUID2 CoFreeUnusedLibraries

oleaut32

SysFreeString SysAllocString LoadTypeLi RegisterTypeLi VariantInit VariantChangeTypeEx VariantClear

user32

GetWindowLongA CharNextA DispatchMessageA PostQuitMessage KillTimer wsprintfA TranslateMessage GetMessageA SetWindowLongA CallWindowProcA CreateWindowExA UnregisterClassA SetTimer GetWindowThreadProcessId GetKeyboardType GetClassInfoExA LoadCursorA DestroyWindow EnumWindows DefWindowProcA PostMessageA IsWindow PeekMessageA GetClassNameA RegisterClassExA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

c072f017c271cb7540aa1a233bec9a5c_JaffaCakes118

advapi32

kernel32

ole32

oleaut32

user32

version

generic