e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118
Size 417KB
Sample240916-bdb4qa1cng
SHA256 25151772531193e8cf1618e76de7f4d9081c2fdd8b5fc9bd0e599def516cafb6
MD5 e3b6edcc5c7baa0aedb926f3309da960
SHA1 9462316c0d4d1ba5830bee9e50d2aea00ea5e99a
SHA512 3cd94e828449a6db3f66885b0dbb280210e20855c11c7476cb86e62f91d6a1daa34156511a33097e04aaf60c1ffff6a08523ae83ca2c07cd18266fc8b5637963
SSDEEP 6144:jSpwTEOzPSK5U2SoJ8VWackVV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:++IK5U2Soys2mwLQcUqgsPBYv745B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118

File Explorer

e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118

.exe 417KB

e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118

IMPHASH 417365d9c1dd50b3baa3205d644853d4
SHA256 25151772531193e8cf1618e76de7f4d9081c2fdd8b5fc9bd0e599def516cafb6
MD5 e3b6edcc5c7baa0aedb926f3309da960
SHA1 9462316c0d4d1ba5830bee9e50d2aea00ea5e99a
SHA512 3cd94e828449a6db3f66885b0dbb280210e20855c11c7476cb86e62f91d6a1daa34156511a33097e04aaf60c1ffff6a08523ae83ca2c07cd18266fc8b5637963
SSDEEP 6144:jSpwTEOzPSK5U2SoJ8VWackVV1ZmXRWLgKocUq8nOfaIROo71YvK09lw+45B:++IK5U2Soys2mwLQcUqgsPBYv745B
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\B\T\BuildResults\bin\Release\AcroRd32Info.pdb

kernel32

HeapSetInformation FreeLibrary GetModuleFileNameW GetProcessHeap GetModuleHandleW LoadLibraryW VerifyVersionInfoW IsDebuggerPresent SetLastError GetLastError SetUnhandledExceptionFilter OutputDebugStringA VerSetConditionMask GetCurrentProcess GetProcAddress GetModuleHandleA InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter GetStartupInfoW

advapi32

RegQueryValueExA RegOpenKeyExA RegQueryValueExW RegOpenKeyExW RegCloseKey

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset __current_exception_context memmove __std_exception_copy wcsstr __current_exception _except_handler4_common wcsrchr __CxxFrameHandler3 __std_terminate __std_exception_destroy _CxxThrowException memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm _cexit _c_exit _register_thread_local_exe_atexit_callback _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _exit _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate _set_app_type _seh_filter_exe _invalid_parameter_noinfo_noreturn exit _initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf _set_fmode __p__commode

api-ms-win-crt-string-l1-1-0

wcslen wcscmp wcsncpy_s wcsncat_s

api-ms-win-crt-heap-l1-1-0

free _get_heap_handle malloc _callnewh _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

e3b6edcc5c7baa0aedb926f3309da960_JaffaCakes118

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic