cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

General

Target
cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118
Size 506KB
Sample240830-va2dzsthph
SHA256 6cd4744b21f0f2f3145ff26150d7c8db36da68a4cf5d7ba7346cd2a31569c871
MD5 cb3ed0fab377c48841597c09e0fec1f1
SHA1 6e74569cc356139e1892732fcc97a6ec94c6240e
SHA512 ecb20de8b435db88f766dd03344ca96a06c7b60392deafdb21fa4e1b2f675a33ed7117294d74bf6395cb79157b438fca7ea53ad26d5cfdc578da59703d662079
SSDEEP 12288:4W7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6zUV:4Wf3YTnJLBv2EKMAcOgqxETMNIpM6Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

File Explorer

cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

.dll 506KB

cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

IMPHASH e4fbe8cce04bb55a530853e0c72f4bd6
SHA256 6cd4744b21f0f2f3145ff26150d7c8db36da68a4cf5d7ba7346cd2a31569c871
MD5 cb3ed0fab377c48841597c09e0fec1f1
SHA1 6e74569cc356139e1892732fcc97a6ec94c6240e
SHA512 ecb20de8b435db88f766dd03344ca96a06c7b60392deafdb21fa4e1b2f675a33ed7117294d74bf6395cb79157b438fca7ea53ad26d5cfdc578da59703d662079
SSDEEP 12288:4W7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6zUV:4Wf3YTnJLBv2EKMAcOgqxETMNIpM6Y
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25835

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Course\student\take\camp \sudden.pdb

kernel32

VirtualProtect GetDiskFreeSpaceW GetModuleFileNameW GetEnvironmentVariableW FindFirstChangeNotificationW FindCloseChangeNotification FindNextChangeNotification GetWindowsDirectoryW MoveFileExW GetCurrentProcessId CreateSemaphoreW GetFileTime WriteConsoleW SetEndOfFile HeapSize FlushFileBuffers GetConsoleCP EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress MultiByteToWideChar GetStringTypeW LCMapStringW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError FreeLibrary LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameA SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType HeapFree CloseHandle HeapAlloc GetACP HeapReAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW WriteFile

ole32

CLSIDFromString CoTaskMemFree CoUninitialize CoCreateInstance CoTaskMemAlloc CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

kernel32

ole32

generic