ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118

General

Target
ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118
Size 106KB
Sample240921-k5439avbpg
SHA256 e4266b81c76fe4f061048249ed49476bb029c15fec28aff184b0c77673656978
MD5 ef7a561b1cf4e43d0b42bb6cc790ef38
SHA1 c1f1b989b748e17a0ca71b8cdfc4165e1d4a1d00
SHA512 31c5616ba48c6da638d994825305a50cde25a89427d6d070a23a786e3267ac1acafce5769f38573257dc38a0aee326deac53145b7a464cc2575fc04bd993b7e2
SSDEEP 3072:dhLaun2zjkR2fHB9qcuIYwPa4oGoZ5xdH:dhuPkR6IBwP9Q5xdH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118

File Explorer

ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118

.exe 106KB

ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118

IMPHASH b8a024ac76bc57f36d5279d7a1f5a13e
SHA256 e4266b81c76fe4f061048249ed49476bb029c15fec28aff184b0c77673656978
MD5 ef7a561b1cf4e43d0b42bb6cc790ef38
SHA1 c1f1b989b748e17a0ca71b8cdfc4165e1d4a1d00
SHA512 31c5616ba48c6da638d994825305a50cde25a89427d6d070a23a786e3267ac1acafce5769f38573257dc38a0aee326deac53145b7a464cc2575fc04bd993b7e2
SSDEEP 3072:dhLaun2zjkR2fHB9qcuIYwPa4oGoZ5xdH:dhuPkR6IBwP9Q5xdH
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\inetpub\Temp\4vqcfbrphlpnmnfm0bt3ij0610\Stub.pdb

kernel32

GetThreadContext FindResourceA SetThreadContext WaitForSingleObject GetCurrentThread GetCommandLineA FindResourceExA CreateProcessA GetStartupInfoA GetLastError GetProcAddress VirtualAllocEx LockResource WaitForMultipleObjects GetModuleHandleA CloseHandle WriteProcessMemory ResumeThread CreateThread HeapSetInformation GetStartupInfoW HeapFree EncodePointer DecodePointer HeapAlloc RaiseException SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize LeaveCriticalSection EnterCriticalSection LoadLibraryW UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent

Sharing

General

Malware Config

Signatures

File Explorer

ef7a561b1cf4e43d0b42bb6cc790ef38_JaffaCakes118

kernel32

generic