06251905414e40b3558827457ed25d39_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
06251905414e40b3558827457ed25d39_JaffaCakes118
Size 493KB
Sample241001-rgea9axejg
SHA256 7e94f7bd8ac08182391563fd6586dd46be2c8a9da69d1257ebb0dedf368db583
MD5 06251905414e40b3558827457ed25d39
SHA1 e33b8115b6863e42b0aa8b732720fb986292f0f0
SHA512 569192e8ee46f9cda48f6b7a031dd6e6c3e3132e9cb9d7bcdfafc31f3bff4751d15e9d6c1124a2282bf2ff376b942ea5473b717d1735d8a12fcad2f1bb5f0c92
SSDEEP 12288:gZpAHRYI//Q1HYRy6xmHuaFtn1XLRLvoQoZRAWtKw/PMpsTFM:y+H2GxmPxL6QIr/PMpMM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06251905414e40b3558827457ed25d39_JaffaCakes118

File Explorer

06251905414e40b3558827457ed25d39_JaffaCakes118

.exe 493KB

06251905414e40b3558827457ed25d39_JaffaCakes118

IMPHASH 49b301ad6e0fabf2e9cc87e8c7fd765b
SHA256 7e94f7bd8ac08182391563fd6586dd46be2c8a9da69d1257ebb0dedf368db583
MD5 06251905414e40b3558827457ed25d39
SHA1 e33b8115b6863e42b0aa8b732720fb986292f0f0
SHA512 569192e8ee46f9cda48f6b7a031dd6e6c3e3132e9cb9d7bcdfafc31f3bff4751d15e9d6c1124a2282bf2ff376b942ea5473b717d1735d8a12fcad2f1bb5f0c92
SSDEEP 12288:gZpAHRYI//Q1HYRy6xmHuaFtn1XLRLvoQoZRAWtKw/PMpsTFM:y+H2GxmPxL6QIr/PMpMM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1287804

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

CreateFileMappingA CreateFileA InitializeCriticalSection GetProcAddress GetCurrentProcess LocalFree RaiseException LocalAlloc GetVersionExA TerminateProcess Sleep WaitForSingleObject GetExitCodeProcess GetEnvironmentVariableA LeaveCriticalSection EnterCriticalSection SetLastError GetFullPathNameA DeleteFileA WriteFile GetTempFileNameA GetTempPathA VirtualFree VirtualProtect SetFilePointer VirtualAlloc DuplicateHandle MapViewOfFile GetFileSize GetFileTime LoadLibraryA FlushFileBuffers GetModuleFileNameA FindFirstFileA CreateProcessA SetEnvironmentVariableA OpenProcess GetCurrentProcessId HeapAlloc HeapCreate HeapFree FormatMessageA GetLastError SetUnhandledExceptionFilter VirtualQuery CreateFileW WideCharToMultiByte GetFileAttributesA CreateFileMappingW FreeLibrary LoadLibraryW GetModuleHandleW ExitProcess FindClose GetModuleHandleA UnmapViewOfFile CloseHandle ReadFile GetSystemTimeAsFileTime FindNextFileA RtlUnwind

user32

wvsprintfA ChangeDisplaySettingsA MessageBoxA wsprintfA CharUpperBuffA LoadImageA

gdi32

RemoveFontResourceA DeleteDC AddFontResourceA CreateCompatibleDC CreateDIBSection

Name

Size

362KB

Virtual Size

1024KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

58KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

29KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

5KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

06251905414e40b3558827457ed25d39_JaffaCakes118

kernel32

user32

gdi32

generic