54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118

General

Target
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118
Size 428KB
Sample241018-cla23a1ajb
SHA256 69f2bd1188df51cf1e6b4dccb5929e6677925ed65f76950e6cd316f1e7df0450
MD5 54e5fed9b9d8cd10e9aede99c1c60fa0
SHA1 1515b4eb1925e94f5b42aa40b5d5377cd3d956ec
SHA512 d7a3a546ea4ea96224f089901606628a3f19198f32ed60bd7e8b9561e6d6234c0645079021e556720a10614b223a03de59873de9d265b0f542a7662b16347565
SSDEEP 12288:fjNnb4YX5vAyGaX8SYnTKicsGQ7ab6tD:hbjpXStcw7a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118

File Explorer

54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118

.exe 428KB

54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118

IMPHASH 3d5c0ae215804efa8dcfe6508226bcaa
SHA256 69f2bd1188df51cf1e6b4dccb5929e6677925ed65f76950e6cd316f1e7df0450
MD5 54e5fed9b9d8cd10e9aede99c1c60fa0
SHA1 1515b4eb1925e94f5b42aa40b5d5377cd3d956ec
SHA512 d7a3a546ea4ea96224f089901606628a3f19198f32ed60bd7e8b9561e6d6234c0645079021e556720a10614b223a03de59873de9d265b0f542a7662b16347565
SSDEEP 12288:fjNnb4YX5vAyGaX8SYnTKicsGQ7ab6tD:hbjpXStcw7a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection GetCurrentProcessId VirtualAlloc InterlockedIncrement GetCurrentThreadId ExitProcess CreateFileA GetFileType TlsGetValue FindClose CreateEventA CreateProcessW FindResourceW HeapCreate InitializeCriticalSection WideCharToMultiByte CreateProcessA TerminateProcess FormatMessageW SetFileAttributesA GetStringTypeW HeapReAlloc FindNextFileA GetSystemTimeAsFileTime ReadFile GetStartupInfoA SetUnhandledExceptionFilter InterlockedExchange FindFirstFileA GetModuleHandleA TlsFree GetCPInfo GetProcessHeap GetFileAttributesW FreeEnvironmentStringsW MultiByteToWideChar GetWindowsDirectoryA LocalAlloc GetLocaleInfoA GetCurrentProcess LoadLibraryA GetModuleFileNameA FlushFileBuffers GetEnvironmentStringsW HeapAlloc IsDebuggerPresent FindFirstFileW FreeLibrary GetConsoleCP lstrlenA SetHandleCount EnterCriticalSection LoadLibraryExW HeapFree GetLastError GetCurrentThread GetVersion GetTickCount GetCommandLineA GetProcAddress UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings GetStdHandle DeleteCriticalSection TlsSetValue TlsAlloc SetLastError GetEnvironmentVariableA GetVersionExA HeapDestroy VirtualFree RtlUnwind WriteFile InterlockedDecrement FatalAppExitA GetACP GetOEMCP IsBadWritePtr SetConsoleCtrlHandler GetStringTypeA Sleep LCMapStringA LCMapStringW IsValidLocale IsValidCodePage EnumSystemLocalesA GetUserDefaultLCID GetTimeZoneInformation GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA

user32

EnableWindow EnableMenuItem BeginPaint SetWindowLongA PeekMessageA SetWindowPos ShowWindow TranslateMessage

Sharing

General

Malware Config

Signatures

File Explorer

54e5fed9b9d8cd10e9aede99c1c60fa0_JaffaCakes118

kernel32

user32

generic