15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118

General

Target
15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118
Size 10.7MB
Sample241005-b3r68ssdkd
SHA256 7ec2f5fa69e89fa6c3e23ff269f55517ad6ccf833db9c33d13abeae3fe0eaf0f
MD5 15abd71fa9afdedfbc3f64e46c477ded
SHA1 4497a99e9a59dd93c0cf04ea356f491ae39bf709
SHA512 51f6016b01d29ca1d0b3f233de56fcf8fa9d31ed104f1a8be7c0f8fbe6ab15a4d6d0e2ba98bb5f759f180d9e1a8faa1b41ea523aba8b6b37e2beebed74c0f89d
SSDEEP 6144:tvk9RADRUv1CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCP:uRAD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118

File Explorer

15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118

.exe 10.7MB

15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118

IMPHASH 2e4ba4c3dc78e85f4cfb392c4546991b
SHA256 7ec2f5fa69e89fa6c3e23ff269f55517ad6ccf833db9c33d13abeae3fe0eaf0f
MD5 15abd71fa9afdedfbc3f64e46c477ded
SHA1 4497a99e9a59dd93c0cf04ea356f491ae39bf709
SHA512 51f6016b01d29ca1d0b3f233de56fcf8fa9d31ed104f1a8be7c0f8fbe6ab15a4d6d0e2ba98bb5f759f180d9e1a8faa1b41ea523aba8b6b37e2beebed74c0f89d
SSDEEP 6144:tvk9RADRUv1CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCP:uRAD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

nddeapi

NDdeShareAddA NDdeShareGetInfoA NDdeShareEnumA NDdeShareSetInfoA

certcli

CACloseCertType CACloseCA CADeleteCA CAEnumFirstCA

user32

IsDialogMessageW CreateDesktopA wsprintfW LoadIconA LoadMenuW GetMessageW DrawStateW LoadCursorA DialogBoxParamA InsertMenuA PeekMessageW GetClassLongA PostMessageW

kernel32

GetModuleHandleA WaitNamedPipeA CreateDirectoryA EnterCriticalSection lstrcmp lstrcmp CreateMutexA IsBadStringPtrA FindFirstFileA FileTimeToLocalFileTime LoadLibraryW LoadLibraryExW GetProcAddress lstrcmp lstrcmp lstrcmp

shlwapi

PathIsRootA UrlIsA PathCommonPrefixA UrlGetPartA UrlGetLocationA UrlEscapeA UrlHashA PathCombineA UrlCombineA UrlCreateFromPathA UrlIsNoHistoryA UrlUnescapeA PathCompactPathA

clusapi

ClusterEnum CloseCluster ClusterControl CloseClusterNode CloseClusterGroup

advapi32

ReadEventLogW CryptSignHashA RegOpenKeyA RegUnLoadKeyA RegReplaceKeyA RegCreateKeyExW OpenEventLogA RegRestoreKeyW IsTextUnicode GetUserNameA RegEnumKeyW

comsvcs

CoCreateActivity CoLoadServices CoEnterServiceDomain RecycleSurrogate SafeRef

Sharing

General

Malware Config

Signatures

File Explorer

15abd71fa9afdedfbc3f64e46c477ded_JaffaCakes118

nddeapi

certcli

user32

kernel32

shlwapi

clusapi

advapi32

comsvcs

generic