c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118
Size 364KB
Sample240827-v7hcdasdmf
SHA256 66d2bbae28991a475bf212a6f90642f0cd6494a55bdfb86bbda6204857ee3476
MD5 c56920b6f5bd4d43acb3ba0044dbc666
SHA1 25a6aa37eaf84cdc135c7e16dfdad945aa6d3443
SHA512 b78499613323b74dbec146e5c81ccb8119c30d05587b65ef9563f9bb0304474945f467483f65a8f965e30d3031c44a3dc221499240e688949d392fb66018ff09
SSDEEP 6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6AN7:WBOO3VKID90TBEhx4O6a7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118

File Explorer

c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118

.exe 364KB

c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118

IMPHASH 0885b2b2b5829577912d5197330fc416
SHA256 66d2bbae28991a475bf212a6f90642f0cd6494a55bdfb86bbda6204857ee3476
MD5 c56920b6f5bd4d43acb3ba0044dbc666
SHA1 25a6aa37eaf84cdc135c7e16dfdad945aa6d3443
SHA512 b78499613323b74dbec146e5c81ccb8119c30d05587b65ef9563f9bb0304474945f467483f65a8f965e30d3031c44a3dc221499240e688949d392fb66018ff09
SSDEEP 6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6AN7:WBOO3VKID90TBEhx4O6a7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26453

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathFindExtensionA PathFindFileNameA

comdlg32

GetOpenFileNameA

kernel32

GetLocaleInfoW GetCurrentProcess LockResource SizeofResource LoadResource FindResourceA CloseHandle FindFirstFileA WriteFile ReadFile GetFileSize CreateFileA MoveFileA GetTempFileNameA LoadLibraryA GetModuleHandleA LoadLibraryW GetCurrentDirectoryA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidCodePage IsValidLocale EnumSystemLocalesA GetUserDefaultLCID DeleteFileA TerminateProcess Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar GetSystemTimeAsFileTime RaiseException RtlUnwind GetLastError HeapFree GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize GetACP GetOEMCP GetLocaleInfoA

user32

DialogBoxParamA SendMessageA GetDlgItem EndDialog LoadIconA MessageBoxA SetDlgItemTextA GetDlgItemTextA EnableWindow LoadBitmapA ShowWindow

gdi32

DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

c56920b6f5bd4d43acb3ba0044dbc666_JaffaCakes118

shlwapi

comdlg32

kernel32

user32

gdi32

generic