dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118

General

Target
dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118
Size 3.9MB
Sample240914-g32csszfnp
SHA256 3b6b88af6f799c7f6dfca0064f850a139ea22e77d23adb971a82238b05c9b4dd
MD5 dfa4c39d87dbd15f1a8f3411d6eb6b36
SHA1 3c9adacbeee00a1a0bf135add8934c589b103f80
SHA512 fbaf7a7dd06e8c25ceb1c72281d9239e910260f4d392f2beb266988063dd3f50580ba0c891ea3ae08f647e5cc7e34c6355b62249bb92b520a0d177da12347dc0
SSDEEP 49152:jjMzN+D8Pcqfiui7He+iCQQzJz1d0CxT3IEOzy8t5pzl1hutl5LAKaipofmj2zpP:jKN+92iuGiCQSz1JJ37GyOol3pxYpbP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118

File Explorer

dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118

.exe 3.9MB

dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118

IMPHASH 7776f04789f079cc0542f58b44ffb3b8
SHA256 3b6b88af6f799c7f6dfca0064f850a139ea22e77d23adb971a82238b05c9b4dd
MD5 dfa4c39d87dbd15f1a8f3411d6eb6b36
SHA1 3c9adacbeee00a1a0bf135add8934c589b103f80
SHA512 fbaf7a7dd06e8c25ceb1c72281d9239e910260f4d392f2beb266988063dd3f50580ba0c891ea3ae08f647e5cc7e34c6355b62249bb92b520a0d177da12347dc0
SSDEEP 49152:jjMzN+D8Pcqfiui7He+iCQQzJz1d0CxT3IEOzy8t5pzl1hutl5LAKaipofmj2zpP:jKN+92iuGiCQSz1JJ37GyOol3pxYpbP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA GetCurrentProcess GetTickCount GetConsoleAliasesA ActivateActCtx GetLocaleInfoW SizeofResource GetFileAttributesA GetTimeFormatW HeapReAlloc CreateJobObjectA HeapSize GetConsoleDisplayMode FreeUserPhysicalPages LocalAlloc SetConsoleCtrlHandler VirtualProtect FindNextVolumeMountPointW ExitProcess InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException RtlUnwind GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetLastError DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage SetFilePointer InitializeCriticalSectionAndSpinCount MultiByteToWideChar LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA

user32

GetDesktopWindow

gdi32

GetBoundsRect

Sharing

General

Malware Config

Signatures

File Explorer

dfa4c39d87dbd15f1a8f3411d6eb6b36_JaffaCakes118

kernel32

user32

gdi32

generic