519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

General

Target
519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118
Size 437KB
Sample241017-lwt3csseka
SHA256 e64fa69ab240beb65f9aa8228648fb061f9385a844db5dbc4dd53c30327f513c
MD5 519fc5551a9dc3632d37b3d968b7904d
SHA1 f7a421340e37aeb63002bcbbe73753cc2915e903
SHA512 2a39c56f4a793a72ebba5998d27bd78dbd2a661a22c9f87b8c03812c7b0aea1f2d2af4b464a0c6b655f1d90ea6d2dbc1e3793906e425205425704e56a162d8d4
SSDEEP 12288:YGBboGFTywYhBxVV4lWK4KhBoC2AI5UNl:Y+boEywwB4z6BAYUD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

File Explorer

519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

.exe 437KB

519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

IMPHASH e3e2be9cdc0adbef1f58743e28e700b8
SHA256 e64fa69ab240beb65f9aa8228648fb061f9385a844db5dbc4dd53c30327f513c
MD5 519fc5551a9dc3632d37b3d968b7904d
SHA1 f7a421340e37aeb63002bcbbe73753cc2915e903
SHA512 2a39c56f4a793a72ebba5998d27bd78dbd2a661a22c9f87b8c03812c7b0aea1f2d2af4b464a0c6b655f1d90ea6d2dbc1e3793906e425205425704e56a162d8d4
SSDEEP 12288:YGBboGFTywYhBxVV4lWK4KhBoC2AI5UNl:Y+boEywwB4z6BAYUD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle Sleep VirtualAlloc GetLocaleInfoA SizeofResource LoadResource SetConsoleMode ReadConsoleInputA CreateFileW SetStdHandle WriteConsoleW LoadLibraryW HeapReAlloc FindResourceA InterlockedIncrement InterlockedDecrement WideCharToMultiByte EncodePointer DecodePointer InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar RtlUnwind RaiseException GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc GetCPInfo LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress HeapCreate IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer HeapSize GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeW

user32

GetForegroundWindow GetWindowDC PrintWindow ReleaseDC SetTimer GetMessageA TranslateMessage DispatchMessageA KillTimer

gdi32

BitBlt

Sharing

General

Malware Config

Signatures

File Explorer

519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

kernel32

user32

gdi32

generic