69026f56e73594aef252701f5cd33a66_JaffaCakes118

General

Target
69026f56e73594aef252701f5cd33a66_JaffaCakes118
Size 1.0MB
Sample241022-fl5s8a1bkn
SHA256 1ed73c83f1d8fb1731e4b011a5bcf31e2b41086df4e703e52860aa14a5014638
MD5 69026f56e73594aef252701f5cd33a66
SHA1 a935abbc4b352eba8905c9fc70fcae3d8bbc4d09
SHA512 70bb63d2427b7180975d078ed701be52ebacf9427cdeb6564cc7192fdf4324e793b53d5cd6f8109183e079b00ce4e62cd0f65807ad6482bf9044a9f3eaa4eaec
SSDEEP 24576:4Li2zqDfdqTuDzZiP4DqkelzPPnyU5pUsWkE+muKrIEG+AOY:4L5zUM8Ns4N4PnyU52x+muKrIH+jY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69026f56e73594aef252701f5cd33a66_JaffaCakes118

File Explorer

69026f56e73594aef252701f5cd33a66_JaffaCakes118

.exe 1.0MB

69026f56e73594aef252701f5cd33a66_JaffaCakes118

IMPHASH fbc78b2fcb37b8dfb189e821f7f5af5a
SHA256 1ed73c83f1d8fb1731e4b011a5bcf31e2b41086df4e703e52860aa14a5014638
MD5 69026f56e73594aef252701f5cd33a66
SHA1 a935abbc4b352eba8905c9fc70fcae3d8bbc4d09
SHA512 70bb63d2427b7180975d078ed701be52ebacf9427cdeb6564cc7192fdf4324e793b53d5cd6f8109183e079b00ce4e62cd0f65807ad6482bf9044a9f3eaa4eaec
SSDEEP 24576:4Li2zqDfdqTuDzZiP4DqkelzPPnyU5pUsWkE+muKrIEG+AOY:4L5zUM8Ns4N4PnyU52x+muKrIH+jY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

54132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle CreateFileA GetFileSize MapViewOfFile UnmapViewOfFile WriteFile SetLastError CreateFileMappingA GetModuleFileNameA GetModuleHandleA DeleteFileA MoveFileExA CreateProcessW SystemTimeToFileTime WaitForSingleObject TerminateProcess GetLocalTime GetTempPathA GetFullPathNameA GetThreadContext GetCurrentThread IsBadReadPtr ExpandEnvironmentStringsA WideCharToMultiByte GetFileAttributesA GetEnvironmentVariableA MultiByteToWideChar CreateDirectoryA FindFirstFileA GetProcAddress RemoveDirectoryA FindClose LoadLibraryA GetCurrentDirectoryA GetCurrentProcessId GetVolumeInformationW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection VirtualAlloc GetExitCodeProcess VirtualFree HeapFree HeapAlloc GetCurrentThreadId GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapCreate HeapReAlloc GetModuleHandleW Sleep ExitProcess GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW RtlUnwind SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW VirtualQuery

advapi32

CheckTokenMembership FreeSid AllocateAndInitializeSid RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

69026f56e73594aef252701f5cd33a66_JaffaCakes118

kernel32

advapi32

shell32

generic