ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118

General

Target
ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118
Size 76KB
Sample240920-27z1ratcph
SHA256 f6932a5935ff7dc540604a66883a8b0e79fd0d0605fb084e40ac0b1378e02957
MD5 ee9e08963a6d4a0e73764a4d0bae6978
SHA1 dbfd99f822a79453dea1a02c094a87c118fcd0c9
SHA512 4121685be6e54998a770e69fbc507b70430155b0aea695009230e0c6c2ebf6df8d817636802fa60c46e57f167b8ea1c3677d87b092040a2361891419edf1bd60
SSDEEP 1536:8iohjEhGLNfDQVAbGrzs1DJG8aE2EvTA:8ioVDQVA8zs1h2WA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118

File Explorer

ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118

.dll 76KB

ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118

IMPHASH b56833ce1704a6fd9cf9d2ea007c73a4
SHA256 f6932a5935ff7dc540604a66883a8b0e79fd0d0605fb084e40ac0b1378e02957
MD5 ee9e08963a6d4a0e73764a4d0bae6978
SHA1 dbfd99f822a79453dea1a02c094a87c118fcd0c9
SHA512 4121685be6e54998a770e69fbc507b70430155b0aea695009230e0c6c2ebf6df8d817636802fa60c46e57f167b8ea1c3677d87b092040a2361891419edf1bd60
SSDEEP 1536:8iohjEhGLNfDQVAbGrzs1DJG8aE2EvTA:8ioVDQVA8zs1h2WA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10757

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitProcess QueryPerformanceCounter CreateDirectoryW QueryPerformanceFrequency GetLocaleInfoA GetACP CloseHandle GetLastError GetStdHandle GetCurrentProcess DuplicateHandle CreatePipe CreateProcessA TerminateProcess GetExitCodeProcess WaitForSingleObject GetVersion GetModuleFileNameA GetSystemTimeAsFileTime GetTickCount GetCurrentProcessId WideCharToMultiByte MultiByteToWideChar IsDBCSLeadByte ResetEvent SetConsoleCtrlHandler CreateSemaphoreA ReleaseSemaphore InterlockedDecrement SetEvent InterlockedIncrement GetCurrentThreadId CreateEventA InterlockedExchange GetConsoleCP GetConsoleOutputCP GetVersionExA OutputDebugStringA GetModuleHandleA GetProcessTimes GetEnvironmentVariableA CreateFileW CreateFileA GetSystemTime SystemTimeToFileTime SetFileTime DeleteFileW DeleteFileA RemoveDirectoryW RemoveDirectoryA MoveFileW MoveFileA GetProcAddress CreateDirectoryA GetFullPathNameW FindFirstFileW FindNextFileW FindNextFileA SetFileAttributesW SetFileAttributesA GetFileAttributesW GetFileAttributesA GetFileType GetFileInformationByHandle GetFileAttributesExW GetFileAttributesExA SetCurrentDirectoryW GetCurrentDirectoryW SetLastError SetEnvironmentVariableW SetCurrentDirectoryA GetCurrentDirectoryA SetEnvironmentVariableA Sleep FlushViewOfFile SetFilePointer CreateFileMappingA MapViewOfFile GetFileSize UnmapViewOfFile GetSystemInfo FindFirstFileA FindClose SetEndOfFile GetFullPathNameA LoadLibraryExA FormatMessageA FreeLibrary ExitThread

msvcrt

memcpy

Sharing

General

Malware Config

Signatures

File Explorer

ee9e08963a6d4a0e73764a4d0bae6978_JaffaCakes118

kernel32

msvcrt

generic