4319eb471b382faf796e5bccba27a475_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4319eb471b382faf796e5bccba27a475_JaffaCakes118
Size 539KB
Sample241014-tyslbayclp
SHA256 b4049aa6a739c4ab79be7c33cefcbe3fb65bcd3725791d96d087bcd2c40f6eda
MD5 4319eb471b382faf796e5bccba27a475
SHA1 2b8bf8649df27a7d89b643198b9288db254e75e8
SHA512 d95e5487dd12fb75304036477aaee348b4fdd5a28132e571f575592166e78de7994f596522655046d2afc3ab9e5dcfbb876da8dacb7ff58a7f5060d692f7e463
SSDEEP 12288:HlDjQATkgQTwzkSJcU8C/0dvLSrOpJBV1Ls2LMpB8a:FvQAKTUk8R8C/09LMOpJBV1Ls2wBP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4319eb471b382faf796e5bccba27a475_JaffaCakes118

File Explorer

4319eb471b382faf796e5bccba27a475_JaffaCakes118

.exe 539KB

4319eb471b382faf796e5bccba27a475_JaffaCakes118

IMPHASH 3da10d6e210620e4a560cf65ed285077
SHA256 b4049aa6a739c4ab79be7c33cefcbe3fb65bcd3725791d96d087bcd2c40f6eda
MD5 4319eb471b382faf796e5bccba27a475
SHA1 2b8bf8649df27a7d89b643198b9288db254e75e8
SHA512 d95e5487dd12fb75304036477aaee348b4fdd5a28132e571f575592166e78de7994f596522655046d2afc3ab9e5dcfbb876da8dacb7ff58a7f5060d692f7e463
SSDEEP 12288:HlDjQATkgQTwzkSJcU8C/0dvLSrOpJBV1Ls2LMpB8a:FvQAKTUk8R8C/09LMOpJBV1Ls2wBP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset sprintf memmove strlen strcpy strcat strcmp memcpy fread longjmp _setjmp3 memcmp strncpy strncmp fabs ceil malloc floor free fclose abort _snprintf __p__iob fprintf _CIpow strtod fmod sin cos abs

kernel32

GetModuleHandleA HeapCreate IsDebuggerPresent OpenProcess ReadProcessMemory WriteProcessMemory VirtualAllocEx CreateRemoteThread WaitForSingleObject GetExitCodeThread VirtualFreeEx CloseHandle CreateToolhelp32Snapshot Module32First Module32Next VirtualProtectEx HeapDestroy ExitProcess GetCurrentProcess GetLastError HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId GetCurrentProcessId InitializeCriticalSection GetModuleFileNameA DuplicateHandle CreatePipe GetStdHandle CreateProcessA EnterCriticalSection LeaveCriticalSection MultiByteToWideChar LoadLibraryA GetProcAddress FreeLibrary Sleep WideCharToMultiByte GlobalLock GlobalSize GlobalUnlock GlobalAlloc GlobalFree SetLastError MulDiv GetTempPathA DeleteFileA CopyFileA GetDriveTypeA FindFirstFileA FindClose GetFileAttributesA WriteFile CreateFileA ReadFile SetFilePointer GetFileSize TlsAlloc TlsSetValue GetVersionExA

comctl32

InitCommonControls CreateStatusWindowA InitCommonControlsEx

user32

GetForegroundWindow GetWindowThreadProcessId GetKeyboardState GetAsyncKeyState SendMessageA UpdateLayeredWindow GetWindowLongA SetWindowLongA GetCursorPos GetWindowRect CharUpperA GetPropA RemovePropA FillRect GetIconInfo DrawStateA GetParent GetClientRect InvalidateRect CallWindowProcA SetPropA DestroyWindow ShowWindow IsZoomed MoveWindow MessageBoxA IsWindowVisible IsWindowEnabled EnableWindow EnumWindows CreateWindowExA SetFocus PeekMessageA TranslateMessage DispatchMessageA DefWindowProcA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx GetSystemMetrics GetActiveWindow CreateAcceleratorTableA IsIconic ScreenToClient GetMenu SetWindowPos MsgWaitForMultipleObjects GetMessageA TranslateAcceleratorA SetCursorPos LoadImageA SetCursor MapWindowPoints SystemParametersInfoA GetKeyState SetCapture PostMessageA ReleaseCapture GetFocus EnumChildWindows DefFrameProcA IsChild GetClassNameA OpenClipboard EmptyClipboard CloseClipboard SetClipboardData DestroyIcon CreateIconFromResourceEx CreateIconFromResource DrawIconEx

gdi32

CreateCompatibleDC SelectObject GetObjectA GetDIBits SetDIBits DeleteDC GetObjectType DeleteObject IntersectClipRect GetStockObject CreateDCA GetDeviceCaps CreateFontA BitBlt GdiSetBatchLimit GdiGetBatchLimit SetStretchBltMode SetBrushOrgEx StretchBlt CreateDIBSection CreateBitmap SetPixel GetTextExtentPoint32A SetBkMode SetTextAlign SetBkColor SetTextColor TextOutA GetPixel CreateFontIndirectA GetTextMetricsA CreateCompatibleBitmap

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

oleaut32

SysAllocStringLen SysAllocString SysStringLen SysFreeString VariantInit DispGetParam VariantClear

ole32

CoInitialize CoUninitialize CoCreateInstance CreateStreamOnHGlobal GetHGlobalFromStream OleInitialize RevokeDragDrop

shell32

ShellExecuteExA

winmm

timeBeginPeriod timeEndPeriod

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

Sharing

General

Malware Config

Signatures

File Explorer

4319eb471b382faf796e5bccba27a475_JaffaCakes118

msvcrt

kernel32

comctl32

user32

gdi32

advapi32

oleaut32

ole32

shell32

winmm

urlmon

wininet

generic