cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

General

Target
cc4fecd33a8843267f9841d480fc138a_JaffaCakes118
Size 3.8MB
Sample240831-gfe62sydld
SHA256 74846745333b001821e5641e3f037f5560f5098f4946516f9f0917f193c740e7
MD5 cc4fecd33a8843267f9841d480fc138a
SHA1 e5f28d9feef1a8a03d80add7bafc306e24e9c40c
SHA512 fe345c8c9d9a9ce5578d57d3430f24788930742de70e9968aaa170c01a405bf58ae01b1010957029d4191f4af8fe3105c2abe26a70cc6f4154e121a9fb2b49ee
SSDEEP 98304:MrdFoOXiSX7PHLQhGQLXtkHBGa0IarlKzRThyNUSAQgQr:MXXiYT8GQLXtib0Hpx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

File Explorer

cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

.exe 3.8MB

cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

IMPHASH 0505efc31f40ea76cbe1a3a5d5dda7f0
SHA256 74846745333b001821e5641e3f037f5560f5098f4946516f9f0917f193c740e7
MD5 cc4fecd33a8843267f9841d480fc138a
SHA1 e5f28d9feef1a8a03d80add7bafc306e24e9c40c
SHA512 fe345c8c9d9a9ce5578d57d3430f24788930742de70e9968aaa170c01a405bf58ae01b1010957029d4191f4af8fe3105c2abe26a70cc6f4154e121a9fb2b49ee
SSDEEP 98304:MrdFoOXiSX7PHLQhGQLXtkHBGa0IarlKzRThyNUSAQgQr:MXXiYT8GQLXtib0Hpx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

24727

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent HeapReAlloc CreateFileA HeapCompact lstrcpynA WriteTapemark InterlockedIncrement SetConsoleTextAttribute WaitNamedPipeA GetCurrentProcess SetDefaultCommConfigW GetEnvironmentStringsW SetHandleInformation WaitForSingleObject SetEvent GetModuleHandleW GetProcessHeap GetConsoleTitleA ReadConsoleW WriteFile FindActCtxSectionStringA GetEnvironmentStrings ActivateActCtx FreeConsole GetFileAttributesA HeapValidate VerifyVersionInfoA HeapQueryInformation GetAtomNameW LCMapStringA ReleaseActCtx SetLastError AttachConsole VerLanguageNameW ResetEvent LocalAlloc SetConsoleDisplayMode OpenEventA HeapLock SetConsoleWindowInfo GetTapeParameters WaitForMultipleObjects SetConsoleTitleW GetModuleHandleA CreateMutexA VirtualProtect DeleteCriticalSection ReleaseMutex GetVersion GetCurrentProcessId GetPrivateProfileSectionW WriteProcessMemory CommConfigDialogW lstrcpyA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind Sleep GetProcAddress ExitProcess GetLastError GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapAlloc HeapFree FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount VirtualAlloc HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

cc4fecd33a8843267f9841d480fc138a_JaffaCakes118

kernel32

generic