c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118
Size 84KB
Sample240825-nye3bssfpg
SHA256 8354ea405808169e9847a4d35e8b8300b2937da4862f4909676badd327eac963
MD5 c0ae735d7141978e4a909ea4e3537cfe
SHA1 5a6850da83aea3c68c724dac9a4213fbca7c24de
SHA512 ccf3100929e4f08b2c7f1fcfa3e742bdaf54b7d618f8144cab3080a79448137c6dcb1256c1b44bb55c33f9a6eac2ed37d2fd3b27c185d94cf0c3d8074436d23e
SSDEEP 1536:1lgQwkCR4IDNuBhNOV6baOUn0f7pzmVI7:nIDBWNL1Sudz/7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118

File Explorer

c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118

.exe 84KB

c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118

IMPHASH 1fd78d0d9ce764b8996e92d0e22d5555
SHA256 8354ea405808169e9847a4d35e8b8300b2937da4862f4909676badd327eac963
MD5 c0ae735d7141978e4a909ea4e3537cfe
SHA1 5a6850da83aea3c68c724dac9a4213fbca7c24de
SHA512 ccf3100929e4f08b2c7f1fcfa3e742bdaf54b7d618f8144cab3080a79448137c6dcb1256c1b44bb55c33f9a6eac2ed37d2fd3b27c185d94cf0c3d8074436d23e
SSDEEP 1536:1lgQwkCR4IDNuBhNOV6baOUn0f7pzmVI7:nIDBWNL1Sudz/7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4600

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc Sleep GetFileAttributesA GetDateFormatA GetCommandLineA GetStdHandle lstrcatA SetLastError HeapFree GetFullPathNameA DeleteFileA GetModuleFileNameA lstrcpyA WideCharToMultiByte lstrcpynA GetLastError GlobalFree GetFileType GetStringTypeA GetCPInfo

comctl32

ImageList_DrawEx ImageList_DragMove ImageList_Copy ImageList_LoadImageA ImageList_LoadImage ImageList_GetImageInfo ImageList_DrawIndirect ImageList_LoadImageW ImageList_GetIconSize ImageList_AddMasked ImageList_GetImageRect ImageList_ReplaceIcon ImageList_Merge ImageList_Read ImageList_GetImageCount ImageList_DragLeave ImageList_GetDragImage

gdi32

ClearBrushAttributes SetTextColor AddFontResourceExA ExtTextOutA BitBlt GetPixel ClearBitmapAttributes AddFontResourceTracking GetClipBox GetDCOrgEx ExcludeClipRect AddFontResourceW GetCurrentPositionEx CopyMetaFileA GetPixel AddFontResourceA DeleteObject CreateSolidBrush BeginPath RestoreDC

advapi32

RegCreateKeyW RegQueryInfoKeyW RegOpenKeyExW RegEnumValueW RegOpenKeyA RegEnumKeyW RegLoadKeyW RegGetKeySecurity RegCreateKeyExW RegQueryValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueW RegFlushKey RegReplaceKeyA RegQueryValueExW RegLoadKeyA

user32

CopyRect GetDlgItem GetDC AppendMenuW AppendMenuA LoadMenuA GetWindowTextA CalcMenuBar DialogBoxParamA GetMenu CreateIcon DrawTextA EndDialog IsWindow CloseWindow GetWindowTextLengthA DialogBoxParamW GetCursor IsMenu

Sharing

General

Malware Config

Signatures

File Explorer

c0ae735d7141978e4a909ea4e3537cfe_JaffaCakes118

kernel32

comctl32

gdi32

advapi32

user32

generic