07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118
Size 25KB
Sample241001-zc188ashpg
SHA256 0535f41d544c10c1439e0fbb6725fa7904ef5cf383f3e7b10828b12f36493d16
MD5 07543761d6a7f49c1e74ea90540f51fb
SHA1 132ac25a2f2a58bae347a4e8c7dc0f9b3f27154e
SHA512 b34ffe0f25a6c6dc059e666251640abe1e4612139f2a24b5b87a8ec37b8f52c958276fee9fcf4304070119a5cbe7af1905e0c34871530ef9316a37acd151232c
SSDEEP 384:SpBodXOdeAXVywDYQFCq2imJDNqSPf5zoWcue6mb5UM9jCU508gR2rL:S/odXyeAlywDaimSWzoWsJ5UQCU5f42
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118

File Explorer

07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118

.dll .vbs 25KB

07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118

IMPHASH ada9f7a382cbd105f4e8f56f77c28d19
SHA256 0535f41d544c10c1439e0fbb6725fa7904ef5cf383f3e7b10828b12f36493d16
MD5 07543761d6a7f49c1e74ea90540f51fb
SHA1 132ac25a2f2a58bae347a4e8c7dc0f9b3f27154e
SHA512 b34ffe0f25a6c6dc059e666251640abe1e4612139f2a24b5b87a8ec37b8f52c958276fee9fcf4304070119a5cbe7af1905e0c34871530ef9316a37acd151232c
SSDEEP 384:SpBodXOdeAXVywDYQFCq2imJDNqSPf5zoWcue6mb5UM9jCU508gR2rL:S/odXyeAlywDaimSWzoWsJ5UQCU5f42
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17565

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

gethostname WSAStartup inet_addr socket connect htons ioctlsocket recv WSAGetLastError send gethostbyname bind listen closesocket accept inet_ntoa

wininet

InternetOpenUrlA InternetReadFile InternetOpenA

shlwapi

StrDupA StrStrA StrToIntA

msvcrt

_adjust_fdiv _unlink _initterm _onexit __dllonexit strcat strlen strrchr mbstowcs wcstombs strcmp memcpy strcpy memset ??3@YAXPAX@Z ??2@YAPAXI@Z sprintf _ftime gmtime free memmove realloc malloc _except_handler3 ??1type_info@@UAE@XZ

kernel32

GetTickCount GetSystemDefaultLangID VerLanguageNameA CopyFileA DuplicateHandle WaitForSingleObject ExpandEnvironmentStringsA DeleteFileA GetModuleFileNameA GetFileTime SetFileTime GetModuleHandleA LoadLibraryA lstrcpynA lstrcpyW GetCurrentProcess FlushInstructionCache SuspendThread GetCurrentThreadId GetCurrentProcessId CreateToolhelp32Snapshot Thread32First OpenThread ResumeThread Thread32Next CreateThread GetProcAddress WriteProcessMemory VirtualFreeEx GetFileAttributesA GetSystemDirectoryA GetEnvironmentVariableA lstrcatA VirtualProtect GetVolumeInformationA GetSystemInfo GetTempPathA GetTempFileNameA Sleep lstrlenW lstrcmpW lstrcmpA VirtualAlloc lstrlenA CloseHandle ReadFile GetFileSize CreateFileA WriteFile SetFilePointer lstrcpyA MultiByteToWideChar

user32

GetMessageA DispatchMessageA TranslateMessage wsprintfA

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegCreateKeyExA RegSetValueExA

shell32

ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

07543761d6a7f49c1e74ea90540f51fb_JaffaCakes118

ws2_32

wininet

shlwapi

msvcrt

kernel32

user32

advapi32

shell32

generic