c2d135c46be54f5d97472fb8324e0964_JaffaCakes118

General

Target
c2d135c46be54f5d97472fb8324e0964_JaffaCakes118
Size 711KB
Sample240826-mnmtrayfpe
SHA256 ad57a98c5acd3e57347823f9b7febc64c758b64e7a25362e6462838df22e03b9
MD5 c2d135c46be54f5d97472fb8324e0964
SHA1 5ddc207927c28fa1a73abdb597a6a3dd8d9dd001
SHA512 7b28f140d726ca03fbd74a6f087494b94dbee15ff6854570abbefce0a86670a27d41141d59ad90a0d763fa62553e81c78331ac50d91b1cbe112212578035a861
SSDEEP 12288:0lXKhZVSOww88nuNgEGyKw9lQJm4Drh0XJWhPJjiHYgPa8BvxY:iyLwVROPXwH+Dt0gPJji9P9Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2d135c46be54f5d97472fb8324e0964_JaffaCakes118

File Explorer

c2d135c46be54f5d97472fb8324e0964_JaffaCakes118

.dll 711KB

c2d135c46be54f5d97472fb8324e0964_JaffaCakes118

IMPHASH e56b2c1f232cc5e7eaf56930f89c3590
SHA256 ad57a98c5acd3e57347823f9b7febc64c758b64e7a25362e6462838df22e03b9
MD5 c2d135c46be54f5d97472fb8324e0964
SHA1 5ddc207927c28fa1a73abdb597a6a3dd8d9dd001
SHA512 7b28f140d726ca03fbd74a6f087494b94dbee15ff6854570abbefce0a86670a27d41141d59ad90a0d763fa62553e81c78331ac50d91b1cbe112212578035a861
SSDEEP 12288:0lXKhZVSOww88nuNgEGyKw9lQJm4Drh0XJWhPJjiHYgPa8BvxY:iyLwVROPXwH+Dt0gPJji9P9Y
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

391120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\CleanMatter\seasonThen\Tellrose\Language.pdb

kernel32

VirtualAlloc VirtualFree VirtualProtect HeapAlloc HeapReAlloc HeapFree ResetEvent Sleep GetLocalTime lstrcmpA CreateSemaphoreA GetEnvironmentVariableA GetSystemDirectoryA CreateDirectoryA CreateFileA CopyFileA DecodePointer SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameA GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapValidate GetSystemInfo GetStringTypeW GetACP LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStdHandle GetFileType WriteFile OutputDebugStringA OutputDebugStringW WriteConsoleW CreateThread HeapSize HeapQueryInformation CreateFileW

shlwapi

PathIsRootA PathCanonicalizeA PathIsURLA PathStripToRootA

Sharing

General

Malware Config

Signatures

File Explorer

c2d135c46be54f5d97472fb8324e0964_JaffaCakes118

kernel32

shlwapi

generic