cfed09d803a0419e83f5dee78673a441_JaffaCakes118

General

Target
cfed09d803a0419e83f5dee78673a441_JaffaCakes118
Size 208KB
Sample240906-tklwlswcrf
SHA256 a59841af9e244e406f2956e0a81a9ccb422ad6545349617c6b63c47abb2ba3a5
MD5 cfed09d803a0419e83f5dee78673a441
SHA1 08097c64381d4814b498651ea6f199c3088643c7
SHA512 56791b0ff01d0c5229c9107b68acc2a0b8508cc934f6c5a8a8507be500438e41697842e3d9d8bff966fa09056de1b8c90be270d3f9bd92deb3ae88b3a2f95226
SSDEEP 3072:5CmQHftlbKLiUEMSkNSaN/XzgGf8aXpjR5KiXHtIz:ZQHL+L5EhOSO/XzgGUu/Ny
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfed09d803a0419e83f5dee78673a441_JaffaCakes118

File Explorer

cfed09d803a0419e83f5dee78673a441_JaffaCakes118

.exe 208KB

cfed09d803a0419e83f5dee78673a441_JaffaCakes118

IMPHASH a8133e452ef81498341cc655eaab13f5
SHA256 a59841af9e244e406f2956e0a81a9ccb422ad6545349617c6b63c47abb2ba3a5
MD5 cfed09d803a0419e83f5dee78673a441
SHA1 08097c64381d4814b498651ea6f199c3088643c7
SHA512 56791b0ff01d0c5229c9107b68acc2a0b8508cc934f6c5a8a8507be500438e41697842e3d9d8bff966fa09056de1b8c90be270d3f9bd92deb3ae88b3a2f95226
SSDEEP 3072:5CmQHftlbKLiUEMSkNSaN/XzgGf8aXpjR5KiXHtIz:ZQHL+L5EhOSO/XzgGUu/Ny
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

46912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DrawMenuBar BeginPaint EndPaint EnableMenuItem GetWindowRect SendMessageA SetWindowPos PostMessageA GetMessageA TranslateMessage DispatchMessageA MessageBeep LoadIconA

kernel32

QueryPerformanceCounter CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetProcAddress VirtualAlloc GetCommandLineA GetStartupInfoA EnterCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

cfed09d803a0419e83f5dee78673a441_JaffaCakes118

user32

kernel32

generic