c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118
Size 148KB
Sample240825-nyfnvssfph
SHA256 9172891630d3230594f1bc6183a8e7af14da2a9a31346262562e1f1d75e43133
MD5 c0ae76ce44d858b03b2f0c5585a2da66
SHA1 15dc878e8c298a47aeab737b33f344f5496f5f4d
SHA512 90299e49e45ca97db47322c7e7bb9c0790f2f71ddf1c864c9b686440c6d3666394ced3f5732ac45ec725e0609e2cbd4a1c8ffdbe4b868f615632ec4d5418db6d
SSDEEP 1536:uMswoKXnW0KSjQWOgDymiDA/yPYWztNSV8pttQwak+JwJVdVbMgJECnlrrGG05lg:IbKXnWTaQWOgG5DD9tQGLnMgJnlry
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118

File Explorer

c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118

.dll 148KB

c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118

IMPHASH 1bcdc2cb6c5d92d1e559cebf5cc1d03a
SHA256 9172891630d3230594f1bc6183a8e7af14da2a9a31346262562e1f1d75e43133
MD5 c0ae76ce44d858b03b2f0c5585a2da66
SHA1 15dc878e8c298a47aeab737b33f344f5496f5f4d
SHA512 90299e49e45ca97db47322c7e7bb9c0790f2f71ddf1c864c9b686440c6d3666394ced3f5732ac45ec725e0609e2cbd4a1c8ffdbe4b868f615632ec4d5418db6d
SSDEEP 1536:uMswoKXnW0KSjQWOgDymiDA/yPYWztNSV8pttQwak+JwJVdVbMgJECnlrrGG05lg:IbKXnWTaQWOgG5DD9tQGLnMgJnlry
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66389

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Projects\NSIS_Prj\_CMVideo_EXE_1\InputSource\1.1\morphed\Release\CMVideo.pdb

kernel32

LoadResource FindResourceA FindResourceExA WideCharToMultiByte MultiByteToWideChar lstrlenW EnterCriticalSection LeaveCriticalSection GetLastError lstrlenA lstrcmpiA lstrcpynA lstrcpyA GetModuleFileNameA lstrcatA IsDBCSLeadByte InterlockedIncrement InterlockedDecrement FreeLibrary LoadLibraryExA GetModuleHandleA LockResource HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LoadLibraryA WriteFile UnhandledExceptionFilter CloseHandle FlushFileBuffers SizeofResource DeleteCriticalSection InitializeCriticalSection RaiseException GetVersionExA GetThreadLocale GetLocaleInfoA GetACP LocalFree InterlockedExchange SetStdHandle GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetCPInfo GetOEMCP GetCurrentProcess SetFilePointer IsBadCodePtr ExitProcess RtlUnwind VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA QueryPerformanceCounter GetTickCount GetCurrentProcessId SetUnhandledExceptionFilter HeapCreate VirtualFree IsBadWritePtr TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue GetProcAddress TerminateProcess IsBadReadPtr

user32

CharNextA

advapi32

RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegQueryValueExA

ole32

CoInitialize CoTaskMemRealloc OleRun CoCreateInstance StringFromGUID2 CoUninitialize CoTaskMemAlloc CoTaskMemFree

oleaut32

SysStringLen LoadRegTypeLi DispCallFunc SysStringByteLen SysAllocStringByteLen SysAllocStringLen VariantClear VariantInit VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysFreeString GetErrorInfo

shlwapi

PathFindExtensionA

Sharing

General

Malware Config

Signatures

File Explorer

c0ae76ce44d858b03b2f0c5585a2da66_JaffaCakes118

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic