627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118
Size 368KB
Sample241020-qs772a1amb
SHA256 3503e011b2844b6eb3f18b3a7c0965ff07171ac6af2488fcf03c0e69d95cd066
MD5 627ec4f42d9649bc8309d87f03d1c288
SHA1 6cd845e8de2c2197cbab48f94eea823f88b0efd9
SHA512 62899ac229fbfff6cd6ace9610b6d6dc027cc32ffe5b7b2c08fb3445815e134caec32047e0a5129118675f22b32aed516fc877b33c90da98261eb44f119a74bd
SSDEEP 6144:e680E92oeOE4G63VEuFwm+DDrhd3wbYqaUq/JyKSmi97Msg4piwbBS9lkw86C:e68PIHt6DObD5dmYqarImi9jB4SBylkN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118

File Explorer

627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118

.exe 368KB

627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118

IMPHASH 375242f7ca8d8be2e09f3382a08d29b4
SHA256 3503e011b2844b6eb3f18b3a7c0965ff07171ac6af2488fcf03c0e69d95cd066
MD5 627ec4f42d9649bc8309d87f03d1c288
SHA1 6cd845e8de2c2197cbab48f94eea823f88b0efd9
SHA512 62899ac229fbfff6cd6ace9610b6d6dc027cc32ffe5b7b2c08fb3445815e134caec32047e0a5129118675f22b32aed516fc877b33c90da98261eb44f119a74bd
SSDEEP 6144:e680E92oeOE4G63VEuFwm+DDrhd3wbYqaUq/JyKSmi97Msg4piwbBS9lkw86C:e68PIHt6DObD5dmYqarImi9jB4SBylkN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

79070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

PolyBezierTo EqualRgn OffsetRgn SetPolyFillMode GetBkColor DeleteEnhMetaFile EndDoc RemoveFontResourceA CreateFontIndirectW GetTextMetricsA SetViewportOrgEx GetMapMode CreateRectRgn CreatePenIndirect GetROP2 SetPixel SetPixelV CreateFontIndirectA PlayEnhMetaFile GetFontData GetBitmapBits GetCharABCWidthsW SetWindowOrgEx GetGlyphOutlineA GetTextFaceA GetBrushOrgEx CreateICW PatBlt CancelDC GetWindowOrgEx StretchBlt SetAbortProc OffsetWindowOrgEx GetClipBox StartDocW ExtCreatePen GetStockObject GetNearestPaletteIndex GetKerningPairsA StartDocA EnumFontsW SetTextColor Arc Polyline RectVisible CreateDCW ExtCreateRegion OffsetClipRgn EnumFontFamiliesA GetEnhMetaFilePaletteEntries FillRgn EnumMetaFile ExtTextOutA PtVisible GetPixel StrokePath RestoreDC GetWinMetaFileBits GetTextAlign SetTextCharacterExtra DeleteObject EndPage ExtSelectClipRgn CreateCompatibleBitmap TextOutA SetTextAlign GetDeviceCaps ExtEscape GetGlyphOutlineW CopyEnhMetaFileA CreateICA SelectClipRgn CreatePen BeginPath ScaleViewportExtEx SaveDC CopyEnhMetaFileW CreateDIBSection GetObjectType OffsetViewportOrgEx SwapBuffers SetRectRgn SetWinMetaFileBits GetSystemPaletteEntries ResizePalette CreateEllipticRgn SetBitmapBits CloseEnhMetaFile UpdateColors RealizePalette SetROP2 GetCharWidthA GetRgnBox

user32

LoadIconA GetMenu CallMsgFilterA RegisterClassExW RemoveMenu GetCapture MessageBoxA DialogBoxIndirectParamW DestroyCursor LoadBitmapW mouse_event BeginDeferWindowPos SetWindowPlacement IsDialogMessageA MapVirtualKeyA TranslateAcceleratorA IsClipboardFormatAvailable GetProcessWindowStation CreateWindowExW CreateDialogParamA EmptyClipboard DrawStateA SetClassLongW GetParent GetDlgItemInt DdeConnect GetCursorPos FindWindowA InsertMenuW SetScrollPos ShowScrollBar EnableScrollBar SendDlgItemMessageA DefWindowProcA IsCharAlphaW ShowOwnedPopups GetForegroundWindow CharLowerA CharToOemA ChangeDisplaySettingsA SystemParametersInfoW SetCaretPos IsWindow CharUpperBuffW GetUserObjectInformationW TrackPopupMenuEx GetMessagePos GetScrollPos GetSysColor FillRect wvsprintfA DrawIcon GetClassInfoW GetCaretPos ClientToScreen SetPropA SetDlgItemInt DestroyCaret CopyAcceleratorTableW DrawIconEx CharNextW DialogBoxParamA IsChild GetClassInfoExW GetScrollRange RegisterHotKey GetFocus GetClassInfoA DrawTextW PostMessageW LoadMenuW GetWindowLongA DdeFreeStringHandle TranslateMDISysAccel LoadImageA SendInput RegisterWindowMessageA ReuseDDElParam SystemParametersInfoA IsWindowVisible SendDlgItemMessageW PtInRect DrawTextExA SetClipboardData SetClassLongA SetRect IsZoomed GetMenuItemCount SetMenuDefaultItem ModifyMenuA GetSysColorBrush GetDlgCtrlID GetQueueStatus GetClassNameA CheckRadioButton MoveWindow CharUpperW UnhookWinEvent CharNextA GetGUIThreadInfo UnionRect TranslateAcceleratorW GetWindowModuleFileNameA MapDialogRect VkKeyScanW IsIconic VkKeyScanExW RegisterClipboardFormatW OemToCharBuffA KillTimer SetDlgItemTextW GetMessageExtraInfo CreateMenu UnpackDDElParam AttachThreadInput EnumDisplaySettingsW GetLastActivePopup CreateDialogIndirectParamA

msvcrt

_y1 _controlfp _time64 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _getdcwd __dllonexit sqrt tanh _wspawnlpe strxfrm _acmdln __getmainargs _initterm

version

GetFileVersionInfoW GetFileVersionInfoSizeA VerFindFileA VerQueryValueA

advapi32

SetNamedSecurityInfoW GetFileSecurityW RegOverridePredefKey EnumDependentServicesA RegOpenKeyExW CloseServiceHandle RegDeleteKeyA RegUnLoadKeyW GetAce InitializeSecurityDescriptor CreateServiceW ReadEventLogW InitiateSystemShutdownA GetUserNameW OpenSCManagerW GetSidLengthRequired LookupAccountNameW CopySid ControlService LookupPrivilegeValueA RegOpenKeyExA DeleteService SetFileSecurityW ChangeServiceConfigA RegSetValueExW GetAclInformation ChangeServiceConfig2W LsaOpenPolicy StartServiceCtrlDispatcherW EnumServicesStatusA RegCreateKeyExW RegQueryValueW AllocateAndInitializeSid GetSidSubAuthority ReportEventA MakeAbsoluteSD SetFileSecurityA RegConnectRegistryA SetSecurityDescriptorSacl RegSetValueExA RegCreateKeyW ReportEventW RegSetKeySecurity LookupPrivilegeValueW RegEnumKeyW GetLengthSid RegisterServiceCtrlHandlerA LockServiceDatabase RegQueryInfoKeyW RegRestoreKeyW SetKernelObjectSecurity RegCreateKeyExA AdjustTokenPrivileges RegSetValueA RegNotifyChangeKeyValue GetKernelObjectSecurity RevertToSelf GetSidSubAuthorityCount RegCreateKeyA LsaQueryInformationPolicy ChangeServiceConfigW CreateProcessAsUserW GetSidIdentifierAuthority GetUserNameA AddAce

Sharing

General

Malware Config

Signatures

File Explorer

627ec4f42d9649bc8309d87f03d1c288_JaffaCakes118

gdi32

user32

msvcrt

version

advapi32

generic