0708cc9dd85a59f84974ca566533a674_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0708cc9dd85a59f84974ca566533a674_JaffaCakes118
Size 265KB
Sample241001-xtbzjswbpp
SHA256 9d525a6f59da6ba49f58a382bdeb72e53dfcfc45f8d4dbc43f02f47ecadb40de
MD5 0708cc9dd85a59f84974ca566533a674
SHA1 be5c57b1d6cbfb92726e49e4ba9916616f289f8e
SHA512 2574f44a4d8180acdd2dfefa33339330658804c78b8374f4b8437c6be8decf4991cbb700328a2267c4be7f8131f55bf74350dc849f43b66a97719eb968c7767d
SSDEEP 3072:1x0Bu018c5dUPy/rogh/aEHhnibvbINg/ia+kgYgpMalmDv9on+241/Auuotoj7:1i8uvh/JHhniIUFgVM9Kba/Auu0oX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0708cc9dd85a59f84974ca566533a674_JaffaCakes118

File Explorer

0708cc9dd85a59f84974ca566533a674_JaffaCakes118

.exe 265KB

0708cc9dd85a59f84974ca566533a674_JaffaCakes118

IMPHASH 58ae40ccff58a5453aec412de610d0a7
SHA256 9d525a6f59da6ba49f58a382bdeb72e53dfcfc45f8d4dbc43f02f47ecadb40de
MD5 0708cc9dd85a59f84974ca566533a674
SHA1 be5c57b1d6cbfb92726e49e4ba9916616f289f8e
SHA512 2574f44a4d8180acdd2dfefa33339330658804c78b8374f4b8437c6be8decf4991cbb700328a2267c4be7f8131f55bf74350dc849f43b66a97719eb968c7767d
SSDEEP 3072:1x0Bu018c5dUPy/rogh/aEHhnibvbINg/ia+kgYgpMalmDv9on+241/Auuotoj7:1i8uvh/JHhniIUFgVM9Kba/Auu0oX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

282624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateEventA Module32Next Module32First LocalFree FormatMessageA CreateMutexA OpenMutexA WaitForSingleObject LoadLibraryA GetProcAddress GetTickCount WaitForMultipleObjectsEx CreateThread GetCurrentThread SetEnvironmentVariableA MulDiv LocalAlloc WriteFile RaiseException CompareStringW CompareStringA GetOEMCP GetACP GetCPInfo lstrlenA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar SetStdHandle FlushFileBuffers SetFilePointer GetFileType GetStdHandle SetHandleCount ReadFile GetFileSize GetCurrentProcessId CreateFileA ResetEvent GetCurrentProcess DuplicateHandle GetLastError OutputDebugStringA SuspendThread CreateProcessA ResumeThread WriteProcessMemory OpenProcess ReadProcessMemory SetCurrentDirectoryA GetModuleFileNameA GetCurrentDirectoryA FindFirstFileA FindClose CreateToolhelp32Snapshot Process32First GetEnvironmentStringsW GetEnvironmentStrings Process32Next CloseHandle TerminateProcess Sleep GetExitCodeProcess DeleteFileA SetFileAttributesA FindNextFileA MoveFileA RemoveDirectoryA FreeLibrary FileTimeToDosDateTime GetSystemTimeAsFileTime GetFileAttributesA CreateDirectoryA GetVersion HeapFree HeapAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA ExitProcess SetEndOfFile InterlockedDecrement InterlockedIncrement HeapReAlloc HeapSize GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue RtlUnwind GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte

user32

LoadIconA RegisterClassExA CreateWindowExA UpdateWindow PeekMessageA TranslateMessage DispatchMessageA BeginPaint EndPaint DefWindowProcA GetClientRect LoadCursorA SetCursor SendMessageA SetWindowTextA MessageBeep GetWindowRect IsWindowVisible ShowWindow SetForegroundWindow BringWindowToTop AdjustWindowRectEx IsIconic SystemParametersInfoA MoveWindow GetDesktopWindow GetActiveWindow MessageBoxA PostMessageA GetTabbedTextExtentA GetDC ReleaseDC wsprintfA GetWindowThreadProcessId IsWindow GetForegroundWindow SendMessageTimeoutA

gdi32

CreatePen Rectangle CreateSolidBrush LPtoDP SetTextColor TextOutA CreateFontA SelectObject DeleteObject CreateDIBSection SetBkMode DeleteDC CreateCompatibleDC BitBlt GetObjectA

advapi32

CryptDestroyHash CryptAcquireContextA CryptCreateHash CryptHashData RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey CryptImportKey CryptVerifySignatureA CryptDestroyKey CryptReleaseContext

winmm

timeGetTime

imagehlp

ImageRvaToVa MapAndLoad UnMapAndLoad

comctl32

_TrackMouseEvent

Name

.text

Size

156KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

36KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

48KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.FFF

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

0708cc9dd85a59f84974ca566533a674_JaffaCakes118

kernel32

user32

gdi32

advapi32

winmm

imagehlp

comctl32

generic