cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118

General

Target
cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118
Size 372KB
Sample240906-trvr4awbpl
SHA256 76b44ea89c643596a81f26a4a5b49d1273298e8468d1e98bbb1728167464037a
MD5 cff25e1124d4ea17e34cfd412898ed3e
SHA1 305f1a56b73b9d0528eca735e774b6712ca1fcb3
SHA512 d1e995f3c8673949cf58af917923d17246efb6d12fcff3b2215358bdb4efc3b56e4601893c22741a8628a94de24d6b74cc1eb12f53a242aba4540316766ab782
SSDEEP 6144:zKdnFVQ0a++SNIepN5J5VdhYBCWyynWYMCytCjt3vwqPruaQ3JP0UwWa8WOa:zcFV+NSVpNrYBeyWIyatoErGMUwWZWOa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118

File Explorer

cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118

.exe 372KB

cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118

IMPHASH 10d2704f567e6f6916ee9eb926a8e873
SHA256 76b44ea89c643596a81f26a4a5b49d1273298e8468d1e98bbb1728167464037a
MD5 cff25e1124d4ea17e34cfd412898ed3e
SHA1 305f1a56b73b9d0528eca735e774b6712ca1fcb3
SHA512 d1e995f3c8673949cf58af917923d17246efb6d12fcff3b2215358bdb4efc3b56e4601893c22741a8628a94de24d6b74cc1eb12f53a242aba4540316766ab782
SSDEEP 6144:zKdnFVQ0a++SNIepN5J5VdhYBCWyynWYMCytCjt3vwqPruaQ3JP0UwWa8WOa:zcFV+NSVpNrYBeyWIyatoErGMUwWZWOa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FormatMessageW GetFileAttributesA GlobalFlags GetFileAttributesW IsBadStringPtrA GetStdHandle FindFirstFileA EnumTimeFormatsW VirtualProtect EndUpdateResourceW IsBadStringPtrW GetFileType GetCommandLineW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapAlloc VirtualAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

RegisterClassExA CreateWindowExA ShowWindow UpdateWindow DestroyWindow

advapi32

RegQueryValueExW RegQueryValueExA AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

cff25e1124d4ea17e34cfd412898ed3e_JaffaCakes118

kernel32

user32

advapi32

generic