68dafc74265a54b7f44a47269fbbe588_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
68dafc74265a54b7f44a47269fbbe588_JaffaCakes118
Size 1.6MB
Sample241022-ethg8ayemk
SHA256 07715a7b7e3be78522eaddf7d0b02b78f0b28ee6ab47081bd7e68d6abb5d46ac
MD5 68dafc74265a54b7f44a47269fbbe588
SHA1 01efb746ea08a8ee34e6e01e04182240ea663f1d
SHA512 be199fb89c857d7cde79f9b6d503890c025bd98356a8610af77ab61f84bca6fb610270375e702828aa9a252f89b7edf2d885cdb6743e49ee3a6e93372cd947df
SSDEEP 49152:zCo6fb4kzYBbmXYHwkO6ct7hgYS+c0elAQP1+eUB8:la8kz2HvO6ctdIR2Qte8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68dafc74265a54b7f44a47269fbbe588_JaffaCakes118

File Explorer

68dafc74265a54b7f44a47269fbbe588_JaffaCakes118

.exe 1.6MB

68dafc74265a54b7f44a47269fbbe588_JaffaCakes118

IMPHASH 4e73db19151d1ed485c4843f251684e3
SHA256 07715a7b7e3be78522eaddf7d0b02b78f0b28ee6ab47081bd7e68d6abb5d46ac
MD5 68dafc74265a54b7f44a47269fbbe588
SHA1 01efb746ea08a8ee34e6e01e04182240ea663f1d
SHA512 be199fb89c857d7cde79f9b6d503890c025bd98356a8610af77ab61f84bca6fb610270375e702828aa9a252f89b7edf2d885cdb6743e49ee3a6e93372cd947df
SSDEEP 49152:zCo6fb4kzYBbmXYHwkO6ct7hgYS+c0elAQP1+eUB8:la8kz2HvO6ctdIR2Qte8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey RegSetValueExA RegConnectRegistryA OpenSCManagerA LockServiceDatabase OpenServiceA ChangeServiceConfigA StartServiceA CloseServiceHandle UnlockServiceDatabase EnumServicesStatusA ControlService DeleteService

shell32

FindExecutableA ShellExecuteA

mpr

WNetAddConnection2A WNetCancelConnection2A WNetOpenEnumA WNetEnumResourceA WNetCloseEnum WNetGetConnectionA

kernel32

GetDriveTypeA GetWindowsDirectoryA GetComputerNameA GetLastError Sleep GetModuleFileNameA GetLocalTime CreateThread OpenMutexA ReleaseMutex CreateMutexA CloseHandle GetVersionExA CreateFileA CreateFileMappingA MapViewOfFile WriteFile SetFilePointer FindFirstFileA FindNextFileA FindClose OpenProcess TerminateProcess CreateToolhelp32Snapshot Process32First Process32Next LoadLibraryA GetProcAddress FreeLibrary GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStartupInfoA GetModuleHandleA VirtualAlloc VirtualQuery HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize HeapValidate ExitProcess RtlUnwind GetFileType GetStdHandle GetCurrentProcess DuplicateHandle SetHandleCount GetCommandLineA GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetTimeZoneInformation SetStdHandle DeleteFileA ReadFile SetEndOfFile

user32

GetWindowTextA GetWindowThreadProcessId EnumWindows

ws2_32

socket htonl htons bind recvfrom sendto WSAStartup WSACleanup inet_addr gethostbyname gethostbyaddr

Sharing

General

Malware Config

Signatures

File Explorer

68dafc74265a54b7f44a47269fbbe588_JaffaCakes118

advapi32

shell32

mpr

kernel32

user32

ws2_32

generic