5881f015352696a5490792aa96448f66_JaffaCakes118

General

Target
5881f015352696a5490792aa96448f66_JaffaCakes118
Size 855KB
Sample241018-vbk4dszbkk
SHA256 9b3dcc892c5627b7cccf68332f938fcec2a1e815eeadda3823b200c7e182df0f
MD5 5881f015352696a5490792aa96448f66
SHA1 c98073627806500285e7f5f55f4018d5161d02e1
SHA512 f6b526c21cafa6cbf3dd28413a5cbc971f2347bbde6353ad13776e3cf1d9f438438fb3c1eb1de0d71bcc6e7e430d5a30eb154c6e331d42525eeb08e638028908
SSDEEP 24576:pU4pDY7tDpES//H0QhCcmrhKvxTb2XvTqXAW:u4NY7tpcQhCcksvtb2mQW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5881f015352696a5490792aa96448f66_JaffaCakes118

File Explorer

5881f015352696a5490792aa96448f66_JaffaCakes118

.exe 855KB

5881f015352696a5490792aa96448f66_JaffaCakes118

IMPHASH d08f0cf34d9171ac77681e33d8b4e017
SHA256 9b3dcc892c5627b7cccf68332f938fcec2a1e815eeadda3823b200c7e182df0f
MD5 5881f015352696a5490792aa96448f66
SHA1 c98073627806500285e7f5f55f4018d5161d02e1
SHA512 f6b526c21cafa6cbf3dd28413a5cbc971f2347bbde6353ad13776e3cf1d9f438438fb3c1eb1de0d71bcc6e7e430d5a30eb154c6e331d42525eeb08e638028908
SSDEEP 24576:pU4pDY7tDpES//H0QhCcmrhKvxTb2XvTqXAW:u4NY7tpcQhCcksvtb2mQW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

148153

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

__p__commode wcschr exit __getmainargs __set_app_type __dllonexit wcsncmp isdigit ??2@YAPAXI@Z _lock iswspace iswdigit ??0exception@@QAE@ABV0@@Z ?terminate@@YAXXZ

kernel32

CreateSemaphoreW SetThreadLocale GetVersionExA GetCommandLineW GetTickCount QueryPerformanceCounter DeleteCriticalSection GetSystemDefaultLangID GetCurrentDirectoryW GetModuleHandleA GetCurrentDirectoryA HeapAlloc FileTimeToSystemTime InterlockedDecrement GetCurrentThreadId SearchPathW GetFullPathNameA SizeofResource LeaveCriticalSection WriteConsoleA IsProcessorFeaturePresent LoadLibraryA VirtualAlloc VirtualQuery LocalFileTimeToFileTime GetConsoleOutputCP EnterCriticalSection GetSystemTimeAsFileTime FindFirstFileW CreateFileMappingW LocalFree lstrcmpW GetDriveTypeW GetProcAddress

user32

ShowWindow GetMenuState SetRectEmpty RegisterClassA RemoveMenu GetWindowDC GetWindow IsRectEmpty GetFocus GetMessagePos IsWindowVisible IsDialogMessageW SendDlgItemMessageW GetMessageW GetWindowTextW LoadBitmapW SendMessageA SetActiveWindow SystemParametersInfoW

advapi32

AddAccessAllowedAce CryptAcquireContextW RegEnumValueW RegDeleteValueW SetSecurityDescriptorDacl RegOpenKeyA OpenServiceW

Sharing

General

Malware Config

Signatures

File Explorer

5881f015352696a5490792aa96448f66_JaffaCakes118

msvcrt

kernel32

user32

advapi32

generic