dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

General

Target
dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118
Size 213KB
Sample240911-s8exjayelq
SHA256 cde833989e07cc2e5fa254c488ea060f3ff84f74506cc10a6baa8daac081bc99
MD5 dab00e1832cf7cedbdd2b9447a049d50
SHA1 c79d8cf491ac150a6255fa8d0b700a26b014f212
SHA512 aec8b64e7d94b24a333138fef12e25a85cf98117bc1489cae50a038ed135703895f1b0ec05f67868fe6429488d316593bfd40c6371aae2160865564ecc34087d
SSDEEP 3072:GfBLDJanbg9SX56My5wmRpthBBNQbRUre83ADKDYykVouMKV7fd9u+4E:GxDEbnX5Xyam3n2P+A7yoo6H9N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

File Explorer

dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

.exe 213KB

dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

IMPHASH 0d09e59fc7a79fdbf6fdc3a3f9a7f603
SHA256 cde833989e07cc2e5fa254c488ea060f3ff84f74506cc10a6baa8daac081bc99
MD5 dab00e1832cf7cedbdd2b9447a049d50
SHA1 c79d8cf491ac150a6255fa8d0b700a26b014f212
SHA512 aec8b64e7d94b24a333138fef12e25a85cf98117bc1489cae50a038ed135703895f1b0ec05f67868fe6429488d316593bfd40c6371aae2160865564ecc34087d
SSDEEP 3072:GfBLDJanbg9SX56My5wmRpthBBNQbRUre83ADKDYykVouMKV7fd9u+4E:GxDEbnX5Xyam3n2P+A7yoo6H9N
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommProperties GetModuleHandleW GetTickCount GlobalAlloc TerminateProcess GetACP GetLastError SetLastError GetProcAddress VirtualProtect WriteConsoleOutputCharacterA HeapReAlloc GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP HeapSize GetLocaleInfoW FillConsoleOutputCharacterA GetSystemTimeAsFileTime GetCurrentProcessId InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter LoadLibraryW

user32

TranslateAcceleratorW BeginPaint GetMenuItemRect GetAltTabInfoA PeekMessageA GetClipboardSequenceNumber UpdateWindow ValidateRect CallMsgFilterA DispatchMessageW PeekMessageW

gdi32

CopyMetaFileA

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

dab00e1832cf7cedbdd2b9447a049d50_JaffaCakes118

kernel32

user32

gdi32

msimg32

generic