68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118

General

Target
68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118
Size 1.0MB
Sample241022-e8wy6axgmf
SHA256 b51fe3e27af68d0fddbfe51fb4c6608729bf55f11e22a38fd1e5ea5137b25b6f
MD5 68ef085fddf6c2d98cfd6b3af336d366
SHA1 1d7289155c7c2a80bcc2599e9fb41ee5fbc9948a
SHA512 b6f43bc5f1302965b611d6fa1f49215f08bbcb8123b743592f90a3d5477b57dbd4fbdc1e1036bf910d9fe04bb262afce7352734b2b7603f1f6197974f3dac5e1
SSDEEP 24576:4Li6EVrtNcw8XaJ9bmGkQvNKVsEedD0Q5X128762RWIm2GfToTs:4L+ZG7Q9CPQlDb5U8+SdgTz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118

File Explorer

68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118

.exe 1.0MB

68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118

IMPHASH fbc78b2fcb37b8dfb189e821f7f5af5a
SHA256 b51fe3e27af68d0fddbfe51fb4c6608729bf55f11e22a38fd1e5ea5137b25b6f
MD5 68ef085fddf6c2d98cfd6b3af336d366
SHA1 1d7289155c7c2a80bcc2599e9fb41ee5fbc9948a
SHA512 b6f43bc5f1302965b611d6fa1f49215f08bbcb8123b743592f90a3d5477b57dbd4fbdc1e1036bf910d9fe04bb262afce7352734b2b7603f1f6197974f3dac5e1
SSDEEP 24576:4Li6EVrtNcw8XaJ9bmGkQvNKVsEedD0Q5X128762RWIm2GfToTs:4L+ZG7Q9CPQlDb5U8+SdgTz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

54132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle CreateFileA GetFileSize MapViewOfFile UnmapViewOfFile WriteFile SetLastError CreateFileMappingA GetModuleFileNameA GetModuleHandleA DeleteFileA MoveFileExA CreateProcessW SystemTimeToFileTime WaitForSingleObject TerminateProcess GetLocalTime GetTempPathA GetFullPathNameA GetThreadContext GetCurrentThread IsBadReadPtr ExpandEnvironmentStringsA WideCharToMultiByte GetFileAttributesA GetEnvironmentVariableA MultiByteToWideChar CreateDirectoryA FindFirstFileA GetProcAddress RemoveDirectoryA FindClose LoadLibraryA GetCurrentDirectoryA GetCurrentProcessId GetVolumeInformationW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection VirtualAlloc GetExitCodeProcess VirtualFree HeapFree HeapAlloc GetCurrentThreadId GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapCreate HeapReAlloc GetModuleHandleW Sleep ExitProcess GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW RtlUnwind SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW VirtualQuery

advapi32

CheckTokenMembership FreeSid AllocateAndInitializeSid RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

68ef085fddf6c2d98cfd6b3af336d366_JaffaCakes118

kernel32

advapi32

shell32

generic