53759d3a69d41706a6f3119890d216b9_JaffaCakes118

General

Target
53759d3a69d41706a6f3119890d216b9_JaffaCakes118
Size 708KB
Sample241017-yrczhatbre
SHA256 09852993c42eb2951a04df62e409eb302b9503e0630cd31b59f9d1d665f5285f
MD5 53759d3a69d41706a6f3119890d216b9
SHA1 071b76992d73795a0611c375707847014b562662
SHA512 a7bd9338d79e6be6dfb769c140276db5a4be64d74153aabda191bdfdde10c474881611d7576c20436abb5a0dca9c2c70a92150b99885e68cf73d81e97f7689e6
SSDEEP 12288:DCbAcis08s7gQFMWC24/MFS+AWmdnWJIjJ5F3+DpEFs3H6v/+JoTNt:DIDis0dFA24/MFSptIJKnx+NE23a3+J0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53759d3a69d41706a6f3119890d216b9_JaffaCakes118

File Explorer

53759d3a69d41706a6f3119890d216b9_JaffaCakes118

.dll 708KB

53759d3a69d41706a6f3119890d216b9_JaffaCakes118

IMPHASH 50abbd9e7be34717c881202779a30647
SHA256 09852993c42eb2951a04df62e409eb302b9503e0630cd31b59f9d1d665f5285f
MD5 53759d3a69d41706a6f3119890d216b9
SHA1 071b76992d73795a0611c375707847014b562662
SHA512 a7bd9338d79e6be6dfb769c140276db5a4be64d74153aabda191bdfdde10c474881611d7576c20436abb5a0dca9c2c70a92150b99885e68cf73d81e97f7689e6
SSDEEP 12288:DCbAcis08s7gQFMWC24/MFS+AWmdnWJIjJ5F3+DpEFs3H6v/+JoTNt:DIDis0dFA24/MFSptIJKnx+NE23a3+J0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\886_Soon\slip\wrong\126\pull.pdb

kernel32

ResetEvent GetCurrentDirectoryW GetWindowsDirectoryW LoadLibraryW GetCurrentProcessId CopyFileW OpenMutexW SetEvent GetSystemDirectoryW WaitForSingleObject GetEnvironmentVariableW GetModuleFileNameW VirtualAlloc VirtualFree VirtualProtect ExitProcess CreateDirectoryW MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException InterlockedFlushSList GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapFree HeapReAlloc GetModuleHandleExW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointerEx SetStdHandle HeapSize FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode CloseHandle CreateFileW WriteConsoleW

aclui

ord1 ord2

cryptui

CryptUIWizFreeDigitalSignContext CryptUIDlgViewContext CryptUIWizExport CryptUIWizImport CryptUIDlgViewCertificateW CryptUIWizDigitalSign

Sharing

General

Malware Config

Signatures

File Explorer

53759d3a69d41706a6f3119890d216b9_JaffaCakes118

kernel32

aclui

cryptui

generic