6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118
Size 214KB
Sample241023-aeeess1dka
SHA256 92d4e0cc3afc27bec83b53afdf680392aab47f9c7d3f5d14d315c94df32a49f2
MD5 6c6de0768176c6e2e1a2980ca11442a3
SHA1 635784d2134eca4e4750803fd8a702f4fef54b54
SHA512 a7799781c5f18add195e62b9af21e733615a1b340589c6c34db868ba23e4f210366c78a33760082cca75e9f308719fe9318ca0f1288d642de581ca142ceebd5d
SSDEEP 6144:Sg7gBkkfl1k85+F8/RV5Tum8JWIqENhm+:xgBfPB5M0tCJWIhNhm+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118

File Explorer

6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118

.exe 214KB

6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118

IMPHASH 15e762ceef40b89e0142f11f6fea196b
SHA256 92d4e0cc3afc27bec83b53afdf680392aab47f9c7d3f5d14d315c94df32a49f2
MD5 6c6de0768176c6e2e1a2980ca11442a3
SHA1 635784d2134eca4e4750803fd8a702f4fef54b54
SHA512 a7799781c5f18add195e62b9af21e733615a1b340589c6c34db868ba23e4f210366c78a33760082cca75e9f308719fe9318ca0f1288d642de581ca142ceebd5d
SSDEEP 6144:Sg7gBkkfl1k85+F8/RV5Tum8JWIqENhm+:xgBfPB5M0tCJWIhNhm+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW FatalAppExitW CreateMutexW GetEnvironmentVariableA LocalFree CreateMailslotA lstrcpyn GetModuleHandleW GetTempFileNameA GetProcAddress HeapCreate GetEnvironmentStringsA lstrcmpi GetShortPathNameA GetCurrentDirectoryW GetNumberFormatW GetStringTypeW GetFullPathNameA ReplaceFileA CreateFileMappingA GetDateFormatA OpenSemaphoreW SetCurrentDirectoryA GetExitCodeThread GetVersion GetFileAttributesW GetEnvironmentVariableW IsValidLocale GetTempPathA SetPriorityClass FindResourceA SetThreadPriority SetCalendarInfoA MultiByteToWideChar CreateEventW lstrlenW OpenMutexA GetModuleHandleA RaiseException GetLongPathNameW GetCurrentProcessId SearchPathA RemoveDirectoryW ReadDirectoryChangesW

user32

RegisterWindowMessageW DefWindowProcW GetDCEx EnumClipboardFormats GetForegroundWindow GetDlgItem SetForegroundWindow wvsprintfW CreateDialogParamA GetSysColor CreateDesktopA DefFrameProcW LoadIconW CopyIcon CheckDlgButton LoadMenuIndirectW EmptyClipboard ShowCursor GetDlgItemTextW IsChild CreateWindowExW EndMenu GetActiveWindow GetMenuItemInfoW DialogBoxParamW PostMessageW LoadBitmapW CallWindowProcA GetClassNameA GetMenuStringA

gdi32

SetEnhMetaFileBits EnumFontFamiliesA CreateFontIndirectExA CreateRectRgn EndFormPage ExtEscape CreateDIBPatternBrush GetICMProfileW EnumFontsW CreateColorSpaceW Polygon PaintRgn GetTextExtentPointA GetCharABCWidthsFloatW

advapi32

RegCreateKeyA RegDeleteValueA RegCloseKey

ws2_32

WSACreateEvent WSASetEvent

urlmon

CreateURLMonikerEx

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.eLt

Size

1KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lEKliP

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.DRK

Size

3KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fa

Size

1024B

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.NSLiLy

Size

1KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.JZyRce

Size

2KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6c6de0768176c6e2e1a2980ca11442a3_JaffaCakes118

kernel32

user32

gdi32

advapi32

ws2_32

urlmon

generic