162592426f3ddba031cd0d2f02e5d453_JaffaCakes118

General

Target
162592426f3ddba031cd0d2f02e5d453_JaffaCakes118
Size 98KB
Sample241005-e1zebavgnn
SHA256 bc0a3294480f0e937286a2b932089f62cbadb6b2a0e617fad2a56f3996dc4390
MD5 162592426f3ddba031cd0d2f02e5d453
SHA1 9ef4abaa935b00f2afd61b78ef0e41b7f95f9b99
SHA512 4166ca6d6ce1fb627b7b1b36023c603b4baf8ad5c1bb09d54de6701315ebe59ed936ec76c2fccec6d2d8d1beb5067b4cb2e76a3a382d0355bde176ea82b09f40
SSDEEP 1536:YzZZpp48Z30lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca29y:GZQlI/HUOjSiToj7CEqfqg29y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
162592426f3ddba031cd0d2f02e5d453_JaffaCakes118

File Explorer

162592426f3ddba031cd0d2f02e5d453_JaffaCakes118

.exe 98KB

162592426f3ddba031cd0d2f02e5d453_JaffaCakes118

IMPHASH d6ebd7155add79ed959af4b9a5231eae
SHA256 bc0a3294480f0e937286a2b932089f62cbadb6b2a0e617fad2a56f3996dc4390
MD5 162592426f3ddba031cd0d2f02e5d453
SHA1 9ef4abaa935b00f2afd61b78ef0e41b7f95f9b99
SHA512 4166ca6d6ce1fb627b7b1b36023c603b4baf8ad5c1bb09d54de6701315ebe59ed936ec76c2fccec6d2d8d1beb5067b4cb2e76a3a382d0355bde176ea82b09f40
SSDEEP 1536:YzZZpp48Z30lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca29y:GZQlI/HUOjSiToj7CEqfqg29y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5677

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose LoadLibraryA GetSystemInfo VirtualAlloc GetStringTypeW GetStringTypeA lstrcpynW MultiByteToWideChar LCMapStringA GetProcAddress GetLocaleInfoA GetACP GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GlobalSize LCMapStringW CreateProcessW HeapSize VirtualQuery GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree HeapFree GetOEMCP GetCPInfo HeapAlloc HeapReAlloc IsBadWritePtr RtlUnwind InterlockedExchange VirtualProtect

user32

UpdateWindow SetWindowPos GetFocus GetWindowRect ScreenToClient

gdi32

SetROP2 Rectangle

comdlg32

ChooseFontA GetSaveFileNameW GetFileTitleA FindTextA

advapi32

RegQueryInfoKeyW RegCloseKey

ole32

OleDuplicateData

Name

.text

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

vbtgioo

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

leenfqq

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

uvnmcmm

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

162592426f3ddba031cd0d2f02e5d453_JaffaCakes118

kernel32

user32

gdi32

comdlg32

advapi32

ole32

generic