122d817923bf477f6b86bd778bd55410_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
122d817923bf477f6b86bd778bd55410_JaffaCakes118
Size 161KB
Sample241004-g2atfssfra
SHA256 cdc02c076473eb14736b0efecd2c2797ac47c503b8f1c41fb6ad08d1836332f7
MD5 122d817923bf477f6b86bd778bd55410
SHA1 35a271f87df827532cc0ae21ef4201c0896a2a2a
SHA512 7bd34721c27ccd86f1c0fc93d0fb423066801d085e16224f84231c77d2cb0df6e7a3a148991fc79e5adbdb01e1dc6ee89c8b62fbb7ff4fbb29aa7f3204288eab
SSDEEP 3072:oBLL3Ofw8IYwuc1s9hlE+HSFLLbZ4HTtbPfjUCqA7sHy0ItDLT0:oBn3yILuTRE+gJIPfA2Cy0It34
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122d817923bf477f6b86bd778bd55410_JaffaCakes118

File Explorer

122d817923bf477f6b86bd778bd55410_JaffaCakes118

.exe 161KB

122d817923bf477f6b86bd778bd55410_JaffaCakes118

IMPHASH 4e8976d981155d112fc65b5f2d6c9e5e
SHA256 cdc02c076473eb14736b0efecd2c2797ac47c503b8f1c41fb6ad08d1836332f7
MD5 122d817923bf477f6b86bd778bd55410
SHA1 35a271f87df827532cc0ae21ef4201c0896a2a2a
SHA512 7bd34721c27ccd86f1c0fc93d0fb423066801d085e16224f84231c77d2cb0df6e7a3a148991fc79e5adbdb01e1dc6ee89c8b62fbb7ff4fbb29aa7f3204288eab
SSDEEP 3072:oBLL3Ofw8IYwuc1s9hlE+HSFLLbZ4HTtbPfjUCqA7sHy0ItDLT0:oBn3yILuTRE+gJIPfA2Cy0It34
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41435

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileAttributesA CreateProcessA GetShortPathNameA GetEnvironmentVariableA RemoveDirectoryA SetEvent WaitForSingleObject GetCurrentProcess LoadLibraryA GetVolumeInformationA DeleteCriticalSection GetLocalTime CreateFileA GetModuleHandleA InitializeCriticalSection EnterCriticalSection RemoveDirectoryW FindFirstFileW FindNextFileW TlsGetValue TlsAlloc GetProfileStringW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar GetProcAddress HeapReAlloc VirtualAlloc GetOEMCP GetACP GetCPInfo HeapAlloc WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetStringTypeW TerminateProcess ExitProcess GetVersion GetCommandLineA

user32

GetScrollPos TranslateMessage DeferWindowPos DispatchMessageW CheckMenuRadioItem SetWindowTextA SendMessageTimeoutA CallNextHookEx CheckDlgButton GetIconInfo IsDialogMessageW MapVirtualKeyA DestroyIcon PostQuitMessage EndPaint InflateRect SetParent SetCursor InsertMenuItemW IntersectRect GetClassNameA RegisterHotKey IsWindowEnabled

ole32

OleUninitialize CoUninitialize CoSuspendClassObjects StgCreateDocfile OleCreate CoInitialize OleInitialize

ws2_32

getsockopt recvfrom WSAStartup WSACleanup accept bind closesocket connect socket getservbyname htons recv ntohs send

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

58KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

hhxwknz

Size

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

txdnbwb

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

Virtual Size

280KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

woirutb

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

122d817923bf477f6b86bd778bd55410_JaffaCakes118

kernel32

user32

ole32

ws2_32

generic