1320826aad206c73693a5d70e452eb34_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
1320826aad206c73693a5d70e452eb34_JaffaCakes118
Size 375KB
Sample241004-ndj6jsvfjd
SHA256 5d9695ddab357ac379216b90f8c47a6fcd8c68c731dddeac77d5aa515dcbaa5a
MD5 1320826aad206c73693a5d70e452eb34
SHA1 066433de1be41d2f11e1b0e2abbf9cfd163b5161
SHA512 81bd13c2724b25bbc2acff208365619b23d4bdf4ea7f7db00f25c0b97346bf7b1879f74c04e795eca2072d7678b2f63c8ff0840dc97468afcde695e9a4c937e0
SSDEEP 6144:NokJIphIK9JyC2Tlni13cs8doYhmyF1zd1IUJq8m+yfvGdZ:KkJJK/yC2Tlnrs8do6mWB1HJq8mhfOX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1320826aad206c73693a5d70e452eb34_JaffaCakes118

File Explorer

1320826aad206c73693a5d70e452eb34_JaffaCakes118

.exe 375KB

1320826aad206c73693a5d70e452eb34_JaffaCakes118

IMPHASH 8192ad9092bb7c35b80a363805f4aba0
SHA256 5d9695ddab357ac379216b90f8c47a6fcd8c68c731dddeac77d5aa515dcbaa5a
MD5 1320826aad206c73693a5d70e452eb34
SHA1 066433de1be41d2f11e1b0e2abbf9cfd163b5161
SHA512 81bd13c2724b25bbc2acff208365619b23d4bdf4ea7f7db00f25c0b97346bf7b1879f74c04e795eca2072d7678b2f63c8ff0840dc97468afcde695e9a4c937e0
SSDEEP 6144:NokJIphIK9JyC2Tlni13cs8doYhmyF1zd1IUJq8m+yfvGdZ:KkJJK/yC2Tlnrs8do6mWB1HJq8mhfOX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xampp\htdocs\Loct\95d2a591d96d45a282ac51cdaab1f150\Loader\Project1\Release\Project1.pdb

kernel32

CloseHandle VirtualProtect CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrcmpW GetFullPathNameW MultiByteToWideChar GetUserDefaultLCID DecodePointer WriteConsoleW GetFileSize CreateFileW lstrcatW GetCommandLineW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW RaiseException

user32

GetDC GrayStringW

advapi32

RegOpenKeyW RegCloseKey RegQueryValueW

shell32

CommandLineToArgvW

ole32

CoInitialize CLSIDFromProgID CoUninitialize CoCreateInstance

oleaut32

LoadTypeLi SysFreeString SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

1320826aad206c73693a5d70e452eb34_JaffaCakes118

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic