f55837c70c1d870facd7cf263c0c4258_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
f55837c70c1d870facd7cf263c0c4258_JaffaCakes118
Size 138KB
Sample240925-gp6qcssapc
SHA256 a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46
MD5 f55837c70c1d870facd7cf263c0c4258
SHA1 ea9ed68d74a344b2f5acb52bdb2a785ff13fbd2c
SHA512 789bc3347986d20ce3744706d40ac656304466b889c9564c25ef4fbdf67aaf80c743bdd2e7540f3b35f44ebe447995797bfa5603f4ebe768ac20084a69227222
SSDEEP 1536:Sd8MIMZT8M4FWSclUFRzFO9phaLRgOzl3OZdmzZZ/NFS46Glvs5W1swQ0:SybMF8h0qFbg8WOzZkqZZFFS4d31sR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55837c70c1d870facd7cf263c0c4258_JaffaCakes118

File Explorer

f55837c70c1d870facd7cf263c0c4258_JaffaCakes118

.dll 138KB

f55837c70c1d870facd7cf263c0c4258_JaffaCakes118

IMPHASH 0909c9d55c37a2f2c1a51af9594db5be
SHA256 a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46
MD5 f55837c70c1d870facd7cf263c0c4258
SHA1 ea9ed68d74a344b2f5acb52bdb2a785ff13fbd2c
SHA512 789bc3347986d20ce3744706d40ac656304466b889c9564c25ef4fbdf67aaf80c743bdd2e7540f3b35f44ebe447995797bfa5603f4ebe768ac20084a69227222
SSDEEP 1536:Sd8MIMZT8M4FWSclUFRzFO9phaLRgOzl3OZdmzZZ/NFS46Glvs5W1swQ0:SybMF8h0qFbg8WOzZkqZZFFS4d31sR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleHandleExW AreFileApisANSI GetConsoleMode GetTempPathA GetCurrentThread UnhandledExceptionFilter GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle GetFileType HeapSize PeekNamedPipe SetCurrentDirectoryW ExitProcess HeapReAlloc GetDriveTypeW FindFirstFileExW FileTimeToLocalFileTime EncodePointer GetSystemTimeAsFileTime IsDebuggerPresent ReadConsoleW GetConsoleCP SetFilePointer FatalAppExitA GetStringTypeW GetCPInfo GetOEMCP InterlockedIncrement InterlockedDecrement CloseHandle GetSystemInfo MapViewOfFile UnmapViewOfFile lstrlenW CreateFileMappingW OpenFileMappingW FreeLibrary GetProcAddress GlobalAlloc GlobalFree GetCurrentProcess GetLastError GetCurrentDirectoryW SystemTimeToTzSpecificLocalTime SystemTimeToFileTime FormatMessageW SetEnvironmentVariableW LoadLibraryW GetModuleFileNameW GetModuleHandleW OutputDebugStringW GetPrivateProfileStringW WritePrivateProfileStringW GetTempPathW GetTempFileNameW CreateDirectoryW GetFileAttributesW GetFileAttributesExW MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObject CreateEventW WideCharToMultiByte GetProcessTimes OpenProcess SetLastError ReadProcessMemory GetFileSizeEx FindClose GetSystemTime FileTimeToSystemTime GetFullPathNameW CreateFileW FindFirstFileW FindNextFileW CopyFileW FlushInstructionCache RaiseException GetCurrentThreadId LoadResource SizeofResource MulDiv lstrcmpW lstrcmpiW LoadLibraryExW GetCommandLineW FindResourceW CompareStringW GetVersionExW GetCurrentProcessId TerminateProcess GetExitCodeProcess CreateThread GetFileInformationByHandle WriteFile ReadFile CreateMutexW CreateProcessW CreateToolhelp32Snapshot Process32FirstW Process32NextW InitializeCriticalSection Sleep GlobalLock GlobalUnlock GetTimeZoneInformation SetUnhandledExceptionFilter GetSystemDirectoryA RtlUnwind DecodePointer VirtualFree VirtualAlloc IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead InterlockedCompareExchange GetProcessHeap HeapFree HeapAlloc QueryPerformanceCounter InterlockedExchange SetConsoleCtrlHandler FlushFileBuffers DebugBreak SetFilePointerEx TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW CreateSemaphoreW IsValidCodePage GetACP GetDateFormatW GetTimeFormatW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle SetEndOfFile WriteConsoleW SetEnvironmentVariableA GetFullPathNameA lstrlenA LoadLibraryA

user32

LoadCursorW GetCaretBlinkTime IsCharAlphaW GetDlgCtrlID ReleaseCapture EnumClipboardFormats CharNextW IsWindow GetMessagePos GetClipboardViewer GetClipboardSequenceNumber GetActiveWindow ShowCaret GetDialogBaseUnits GetDC LoadIconA GetWindowContextHelpId GetTopWindow GetFocus GetMessageTime PaintDesktop GetWindowTextLengthW GetDesktopWindow InSendMessage GetMenu GetQueueStatus

gdi32

CloseEnhMetaFile GetTextCharacterExtra SwapBuffers UnrealizeObject CreateSolidBrush GetFontLanguageInfo GetMapMode CloseFigure GetObjectType WidenPath AbortPath FillPath GetColorSpace DeleteMetaFile SaveDC GetROP2 GetStockObject EndPage

advapi32

RegQueryValueExW RegCloseKey RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegOpenKeyExW RegOpenKeyA RegQueryValueExA

ole32

CoRegisterMessageFilter

Sharing

General

Malware Config

Signatures

File Explorer

f55837c70c1d870facd7cf263c0c4258_JaffaCakes118

kernel32

user32

gdi32

advapi32

ole32

generic