eac0453e8e333b61f8dd6c576671263f_JaffaCakes118

General

Target
eac0453e8e333b61f8dd6c576671263f_JaffaCakes118
Size 101KB
Sample240919-g44jjsvcpf
SHA256 91d6be9b11296713f66e8f9bde5c0e35676175c7a3a2ca104be9b741f75dff81
MD5 eac0453e8e333b61f8dd6c576671263f
SHA1 961e8255b27263b067f7df0a77f76793fd51981d
SHA512 e719e5ab5d0dce276d5766049d707bf3bb8f352fd680581d4188dd266ff03a1d146948ad08e82329e62b71f421b0708baf5279eabb49f233bda04f4c3443f72d
SSDEEP 1536:Ca3leXQ/05IFeV9jtm80BykH39gjnZAPPDr2WHFvSqJNj2:CYeA/jFe7jtF+XH3GADrVHFvSqJB2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac0453e8e333b61f8dd6c576671263f_JaffaCakes118

File Explorer

eac0453e8e333b61f8dd6c576671263f_JaffaCakes118

.exe 101KB

eac0453e8e333b61f8dd6c576671263f_JaffaCakes118

IMPHASH d61b80f490ccd0bad9e353819aaae96b
SHA256 91d6be9b11296713f66e8f9bde5c0e35676175c7a3a2ca104be9b741f75dff81
MD5 eac0453e8e333b61f8dd6c576671263f
SHA1 961e8255b27263b067f7df0a77f76793fd51981d
SHA512 e719e5ab5d0dce276d5766049d707bf3bb8f352fd680581d4188dd266ff03a1d146948ad08e82329e62b71f421b0708baf5279eabb49f233bda04f4c3443f72d
SSDEEP 1536:Ca3leXQ/05IFeV9jtm80BykH39gjnZAPPDr2WHFvSqJNj2:CYeA/jFe7jtF+XH3GADrVHFvSqJB2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId GetCommandLineW MulDiv GetFullPathNameW LocalSize GetLastError WriteFile SetLastError WideCharToMultiByte SetEndOfFile DeleteFileW GetACP FoldStringW GetFileInformationByHandle GetProcessHeap HeapAlloc HeapFree GetUserDefaultUILanguage GetLocalTime GetDateFormatW GetTimeFormatW GlobalLock GlobalUnlock GlobalAlloc lstrcmpW FindFirstFileW FindClose HeapSetInformation GetStartupInfoA TerminateProcess GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter InterlockedCompareExchange Sleep LocalLock LocalUnlock lstrlenW GetLocaleInfoW GlobalFree lstrcmpiW SetErrorMode CreateFileW ReadFile CloseHandle LocalAlloc InterlockedDecrement LocalFree InterlockedIncrement GetVersionExW UnhandledExceptionFilter GetStartupInfoW LocalReAlloc

user32

SetScrollPos GetWindowTextLengthW GetWindowLongW PeekMessageW EnableWindow DialogBoxParamW CreateDialogParamW GetWindowTextW SetWindowPos SetCursor SetForegroundWindow FindWindowW GetSystemMetrics MoveWindow SendMessageW CharNextW CheckMenuItem CloseClipboard IsClipboardFormatAvailable OpenClipboard GetMenuState EnableMenuItem GetSubMenu GetClientRect UnhookWinEvent GetFocus GetMenu MessageBoxW GetDlgCtrlID ChildWindowFromPoint GetDC ShowWindow WinHelpW

gdi32

StartDocW SetAbortProc GetTextMetricsW SetBkMode StartPage SetWindowExtEx SetViewportExtEx SetMapMode CreateFontIndirectW EndPage AbortDoc EndDoc DeleteDC TextOutW GetTextExtentPoint32W CreateDCW SelectObject GetTextFaceW LPtoDP EnumFontsW

advapi32

RegQueryValueExW RegCloseKey RegCreateKeyW RegOpenKeyExW IsTextUnicode CloseServiceHandle QueryServiceConfigW OpenServiceW OpenSCManagerW RegSetValueExW

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

512B

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA2

Size

512B

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA3

Size

512B

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

eac0453e8e333b61f8dd6c576671263f_JaffaCakes118

kernel32

user32

gdi32

advapi32

generic