cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118

General

Target
cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118
Size 225KB
Sample240831-efet6svbjp
SHA256 620b86db2a51b988bcf33dfb0fb7db6088618265381493387bda15e2b9f93e19
MD5 cc2eb25cbb9f59ca34a3abda11402716
SHA1 4d5114750139fb1596c2cecc7942f2fde25b1fbf
SHA512 c1182a98ac87cd06c5c1821fd4489d37ee20004e97ee1e3fcc8050761ffb8986a9e8645e9ae56c475b8ef272a27438b6e583e70e992ef66d028a281872f37aa3
SSDEEP 3072:ji7uFdzf6XBnwhf2Us+25KlaM7M1rUe7lgEXQfzlRDM+iIfcWKKESGQ0CEKU5edW:jiqz+GEUsWa1J1YvdiuogHZU5nb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118

File Explorer

cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118

.exe 225KB

cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118

IMPHASH a79bc7c5047948b9aa8fe55da612ef0f
SHA256 620b86db2a51b988bcf33dfb0fb7db6088618265381493387bda15e2b9f93e19
MD5 cc2eb25cbb9f59ca34a3abda11402716
SHA1 4d5114750139fb1596c2cecc7942f2fde25b1fbf
SHA512 c1182a98ac87cd06c5c1821fd4489d37ee20004e97ee1e3fcc8050761ffb8986a9e8645e9ae56c475b8ef272a27438b6e583e70e992ef66d028a281872f37aa3
SSDEEP 3072:ji7uFdzf6XBnwhf2Us+25KlaM7M1rUe7lgEXQfzlRDM+iIfcWKKESGQ0CEKU5edW:jiqz+GEUsWa1J1YvdiuogHZU5nb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA SetDefaultCommConfigW GetModuleHandleW GetTickCount GetNumberFormatA GetConsoleTitleA GetConsoleCP GlobalAlloc GetFileAttributesW VerifyVersionInfoA WriteConsoleW HeapQueryInformation ReadFile GetModuleFileNameW GetACP lstrlenA GetProcAddress GetProcessHeaps VerLanguageNameA GetTapeParameters FoldStringW GetPrivateProfileSectionA VirtualProtect DeleteCriticalSection SetFileShortNameA GetWindowsDirectoryW DeleteFileW FindActCtxSectionStringW LCMapStringW lstrcpyA CloseHandle SetFilePointerEx SetFilePointer CreateMutexW HeapAlloc EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent GetLastError ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap HeapSize HeapFree SetLastError GetCurrentThreadId GetFileType GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsDebuggerPresent EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetOEMCP GetCPInfo OutputDebugStringW HeapReAlloc GetStringTypeW FlushFileBuffers GetConsoleMode SetStdHandle CreateFileW

user32

GetCaretPos

advapi32

RegQueryValueExA AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

cc2eb25cbb9f59ca34a3abda11402716_JaffaCakes118

kernel32

user32

advapi32

generic