cae361ee0873ae301eb1466f41e023c6_JaffaCakes118

General

Target
cae361ee0873ae301eb1466f41e023c6_JaffaCakes118
Size 3.8MB
Sample240830-p8rdsaverg
SHA256 51511aa1ce51cb88bca3f4c1d76ac562140a953c79ec154078e763c43d3d6145
MD5 cae361ee0873ae301eb1466f41e023c6
SHA1 c6600c8ff72e024183653322385991c1a2293d32
SHA512 15d0fcf1c67a626239444f299adb1cef8cc93fbdc78fd6bbc647366a23ee560dac87a70fbd03e9354564f3072dfac0c316d3d6331dbf0897d7554c2b0884c97b
SSDEEP 98304:VF59WwPfbb36++AfgrhY+ePNJWhrH9k0WuIM3ZRPI0:VPEsv3Hf6ZSJKRDpRA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cae361ee0873ae301eb1466f41e023c6_JaffaCakes118

File Explorer

cae361ee0873ae301eb1466f41e023c6_JaffaCakes118

.exe 3.8MB

cae361ee0873ae301eb1466f41e023c6_JaffaCakes118

IMPHASH 9c5840403a3f20efb5030434f380f3a2
SHA256 51511aa1ce51cb88bca3f4c1d76ac562140a953c79ec154078e763c43d3d6145
MD5 cae361ee0873ae301eb1466f41e023c6
SHA1 c6600c8ff72e024183653322385991c1a2293d32
SHA512 15d0fcf1c67a626239444f299adb1cef8cc93fbdc78fd6bbc647366a23ee560dac87a70fbd03e9354564f3072dfac0c316d3d6331dbf0897d7554c2b0884c97b
SSDEEP 98304:VF59WwPfbb36++AfgrhY+ePNJWhrH9k0WuIM3ZRPI0:VPEsv3Hf6ZSJKRDpRA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile CallNamedPipeA ReadConsoleA SetConsoleActiveScreenBuffer CreateJobObjectW OpenSemaphoreA ConnectNamedPipe SetTapeParameters GetProcessPriorityBoost FindNextVolumeMountPointA SetCommState SetProcessPriorityBoost LoadLibraryW TerminateThread ReadFile lstrcatA GetBinaryTypeW GetACP lstrlenW RaiseException SetLocalTime SetCurrentDirectoryA GetStdHandle FreeLibraryAndExitThread SetLastError GetProcAddress CopyFileA EnterCriticalSection LoadLibraryA LocalAlloc SetFileApisToANSI FindAtomA GetPrivateProfileStructA WaitForMultipleObjects SetEnvironmentVariableA CreateMutexA EnumResourceNamesA GetCurrentDirectoryA LocalFree GetProfileSectionW lstrcpyW InterlockedExchange SetPriorityClass GetLastError MoveFileA HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind HeapFree DeleteCriticalSection LeaveCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar GetLocaleInfoA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA GetModuleHandleA

advapi32

SetThreadToken RevertToSelf

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

cae361ee0873ae301eb1466f41e023c6_JaffaCakes118

kernel32

advapi32

winhttp

generic