4f6f7b9069c060369648f4abff60b372_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4f6f7b9069c060369648f4abff60b372_JaffaCakes118
Size 100KB
Sample241016-2qlf2a1bmp
SHA256 0b76cba1576c51f958c2729d3caa31936eac8b8067b9eac58ecad4b0be48dcc5
MD5 4f6f7b9069c060369648f4abff60b372
SHA1 52b6f7da434b4cdf1b16e84b11176554956e5c90
SHA512 db1c76ee79547b1b160d12fdd85d5fde210ba9445215858e687c5800cae10ad5d01069e1eaa3b422d7b07a08ec3a51e5ad035b8ca4be136af70d94f8018ce28f
SSDEEP 1536:lVZAgmNGe7lHHHT31Jjs+WSwlvmozLmI1DW9rnAsFpQwKh+iQj:+g8GanHTUZTeozxernAtw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6f7b9069c060369648f4abff60b372_JaffaCakes118

File Explorer

4f6f7b9069c060369648f4abff60b372_JaffaCakes118

.exe 100KB

4f6f7b9069c060369648f4abff60b372_JaffaCakes118

IMPHASH 956114af70335caf8beca7e4ab2505d3
SHA256 0b76cba1576c51f958c2729d3caa31936eac8b8067b9eac58ecad4b0be48dcc5
MD5 4f6f7b9069c060369648f4abff60b372
SHA1 52b6f7da434b4cdf1b16e84b11176554956e5c90
SHA512 db1c76ee79547b1b160d12fdd85d5fde210ba9445215858e687c5800cae10ad5d01069e1eaa3b422d7b07a08ec3a51e5ad035b8ca4be136af70d94f8018ce28f
SSDEEP 1536:lVZAgmNGe7lHHHT31Jjs+WSwlvmozLmI1DW9rnAsFpQwKh+iQj:+g8GanHTUZTeozxernAtw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

40244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateFileW lstrcmpiW InterlockedDecrement SetUnhandledExceptionFilter GlobalUnlock InterlockedIncrement FileTimeToSystemTime WideCharToMultiByte GetACP RemoveDirectoryA lstrlenW GetComputerNameW FormatMessageW SetLastError GetSystemDefaultLangID lstrcpyW GlobalFree OutputDebugStringA FileTimeToLocalFileTime GetStartupInfoA DeleteCriticalSection GetTickCount GetSystemTimeAsFileTime LocalFree GetEnvironmentStringsW InitializeCriticalSection GetLastError OutputDebugStringW IsBadReadPtr GetCurrentProcess GetModuleFileNameW QueryPerformanceCounter GetModuleHandleA GlobalAlloc GetDateFormatW GlobalLock LocalReAlloc GetSystemWindowsDirectoryW LoadLibraryW

msvcrt

free wcslen _except_handler3 wcstoul wcscpy ??3@YAXPAX@Z _onexit _wcsicmp _adjust_fdiv wcschr wcsstr __dllonexit malloc _purecall __RTDynamicCast wcscat _initterm wcscmp ??2@YAPAXI@Z _wcsupr memmove ??1type_info@@UAE@XZ ?terminate@@YAXXZ vswprintf mbstowcs wcsrchr

user32

GetDlgItemTextA LoadBitmapW GetWindowLongW SetDlgItemTextW wsprintfW LoadCursorW SystemParametersInfoW GetParent GetDC InsertMenuItemW GetDlgItem DialogBoxParamW SetCursor SendDlgItemMessageW SetFocus LoadIconW WinHelpW MessageBoxW LoadImageW LoadStringW EndDialog RegisterClipboardFormatW EnableWindow SetWindowTextW SendMessageW PostMessageW ReleaseDC SetWindowLongW

advapi32

RegSetValueExW RegDeleteKeyW RegQueryValueExW RegDeleteValueW RegEnumKeyExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

certcli

CAGetCertTypeKeySpec CAEnumNextCertType CAFreeCertTypeExtensions CASetCertTypeProperty CAGetCertTypePropertyEx CASetCertTypeKeySpec CACreateCertType CAFreeCertTypeProperty CAAddCACertificateType CAGetCertTypeProperty CAFreeCAProperty CAGetCAProperty CAGetCertTypeFlags CAEnumCertTypesForCA CAUpdateCA CACloseCertType CASetCertTypeFlags CASetCertTypeExtension CAUpdateCertType CACertTypeSetSecurity CAFindByName CAFindCertTypeByName CACloseCA CAGetCertTypeExtensions CARemoveCACertificateType CAEnumCertTypes CACertTypeGetSecurity

comctl32

PropertySheetW CreatePropertySheetPageW

Sharing

General

Malware Config

Signatures

File Explorer

4f6f7b9069c060369648f4abff60b372_JaffaCakes118

kernel32

msvcrt

user32

advapi32

certcli

comctl32

generic