4394236f3d9baf45ef5b9c4703735255_JaffaCakes118

General

Target
4394236f3d9baf45ef5b9c4703735255_JaffaCakes118
Size 1.0MB
Sample241014-w136yazanc
SHA256 94e48328e1cd6aba301fe93a763c1a8c177ddc159c8ce0071cad18c4e7ba245d
MD5 4394236f3d9baf45ef5b9c4703735255
SHA1 2b2c4bc4cb0349f6d3808a80e595fac94ae3e9c8
SHA512 3fe1025f54032ec55c0a28eccb36bc1fbe4aee6e95d3887ceac553f67885ebde08914304be94ad8552c76f9f90e6a09cb67920df6e75b115d8ca129e6f45d0aa
SSDEEP 24576:4LiiGAZmVz1zGsxF+ZcrvMj8HXELIKdQsHrDP8xpuX+6n8L91ecz:4LgemVbzMcr0j8HXEsKdQsLrznQ91Rz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4394236f3d9baf45ef5b9c4703735255_JaffaCakes118

File Explorer

4394236f3d9baf45ef5b9c4703735255_JaffaCakes118

.exe 1.0MB

4394236f3d9baf45ef5b9c4703735255_JaffaCakes118

IMPHASH fbc78b2fcb37b8dfb189e821f7f5af5a
SHA256 94e48328e1cd6aba301fe93a763c1a8c177ddc159c8ce0071cad18c4e7ba245d
MD5 4394236f3d9baf45ef5b9c4703735255
SHA1 2b2c4bc4cb0349f6d3808a80e595fac94ae3e9c8
SHA512 3fe1025f54032ec55c0a28eccb36bc1fbe4aee6e95d3887ceac553f67885ebde08914304be94ad8552c76f9f90e6a09cb67920df6e75b115d8ca129e6f45d0aa
SSDEEP 24576:4LiiGAZmVz1zGsxF+ZcrvMj8HXELIKdQsHrDP8xpuX+6n8L91ecz:4LgemVbzMcr0j8HXEsKdQsLrznQ91Rz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

54132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle CreateFileA GetFileSize MapViewOfFile UnmapViewOfFile WriteFile SetLastError CreateFileMappingA GetModuleFileNameA GetModuleHandleA DeleteFileA MoveFileExA CreateProcessW SystemTimeToFileTime WaitForSingleObject TerminateProcess GetLocalTime GetTempPathA GetFullPathNameA GetThreadContext GetCurrentThread IsBadReadPtr ExpandEnvironmentStringsA WideCharToMultiByte GetFileAttributesA GetEnvironmentVariableA MultiByteToWideChar CreateDirectoryA FindFirstFileA GetProcAddress RemoveDirectoryA FindClose LoadLibraryA GetCurrentDirectoryA GetCurrentProcessId GetVolumeInformationW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection VirtualAlloc GetExitCodeProcess VirtualFree HeapFree HeapAlloc GetCurrentThreadId GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapCreate HeapReAlloc GetModuleHandleW Sleep ExitProcess GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW RtlUnwind SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW VirtualQuery

advapi32

CheckTokenMembership FreeSid AllocateAndInitializeSid RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

4394236f3d9baf45ef5b9c4703735255_JaffaCakes118

kernel32

advapi32

shell32

generic