e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118

General

Target
e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118
Size 2.9MB
Sample240917-pbc5wssard
SHA256 ba6ebb75ddaf850392f61dd6d4e878a7283a43f996ec2677777e3b2fbf9e1e9d
MD5 e6c9ec0cf5a24665dc259352ca67face
SHA1 c6a1fc7f0c46782999fd356c60d6e66889918c57
SHA512 a9af0a5af15db59542160ac74a57213bae309445d7ea2f04cafc61b1d4d68f83de1f6be664aaa65c6d3bebdaa0699389f281f1c2670eb17e88ef71645853693f
SSDEEP 49152:X65xtuYXTLtFyhVkCkctkTotsE2jgnL4f/DBrGFbKocfTbn7PSUC6m1voZf41pP8:Xs2qUtsE2jdXDB0bKocfOBNARsZYl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118

File Explorer

e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118

.exe 2.9MB

e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118

IMPHASH 66ae0c448f1ac512f86cbd6264147203
SHA256 ba6ebb75ddaf850392f61dd6d4e878a7283a43f996ec2677777e3b2fbf9e1e9d
MD5 e6c9ec0cf5a24665dc259352ca67face
SHA1 c6a1fc7f0c46782999fd356c60d6e66889918c57
SHA512 a9af0a5af15db59542160ac74a57213bae309445d7ea2f04cafc61b1d4d68f83de1f6be664aaa65c6d3bebdaa0699389f281f1c2670eb17e88ef71645853693f
SSDEEP 49152:X65xtuYXTLtFyhVkCkctkTotsE2jgnL4f/DBrGFbKocfTbn7PSUC6m1voZf41pP8:Xs2qUtsE2jdXDB0bKocfOBNARsZYl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount LoadLibraryW GetSystemTimeAdjustment TerminateProcess GetMailslotInfo GetACP FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc FindAtomA SetProcessShutdownParameters IsValidCodePage GetOEMCP HeapSize GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetStringTypeW

user32

GetNextDlgGroupItem GetRawInputBuffer GetAltTabInfoW RegisterRawInputDevices GetRawInputDeviceList EndPaint

shell32

ShellAboutW FindExecutableA DragQueryFileA

Sharing

General

Malware Config

Signatures

File Explorer

e6c9ec0cf5a24665dc259352ca67face_JaffaCakes118

kernel32

user32

shell32

generic