6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118
Size 273KB
Sample241023-jv136syfrd
SHA256 c5d2285af397ffd3089a64e4bc7b9f70182307946e3b8adc08bc974bcc52ef04
MD5 6dd2b63f93504932ff6e00b0f5f509f9
SHA1 85a152df3a946b4561b68f21f5b26330fe6f6f96
SHA512 717812758047476a5a5644e3f7bc636a2b1e6cfee52389965d35a3567bf9595f3e97de3181e356f47d8e828a1a8fc5c58a77df15d94ad13f56f21f506cfbcb89
SSDEEP 3072:TNPJiaqxh8gz5wxatqxI02TEK/BPaAg/7Eajtd0G6LvOVT1JV6ewZPSWpsQ2CF6d:TCugjttPRaDY2tLPVT1T6rSW6u6Wi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118

File Explorer

6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118

.exe 273KB

6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118

IMPHASH 1fc3bdd5ede0a64d563c6b8cda3a7199
SHA256 c5d2285af397ffd3089a64e4bc7b9f70182307946e3b8adc08bc974bcc52ef04
MD5 6dd2b63f93504932ff6e00b0f5f509f9
SHA1 85a152df3a946b4561b68f21f5b26330fe6f6f96
SHA512 717812758047476a5a5644e3f7bc636a2b1e6cfee52389965d35a3567bf9595f3e97de3181e356f47d8e828a1a8fc5c58a77df15d94ad13f56f21f506cfbcb89
SSDEEP 3072:TNPJiaqxh8gz5wxatqxI02TEK/BPaAg/7Eajtd0G6LvOVT1JV6ewZPSWpsQ2CF6d:TCugjttPRaDY2tLPVT1T6rSW6u6Wi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile SystemTimeToTzSpecificLocalTime HeapSize lstrcmpiW IsDebuggerPresent HeapFree SizeofResource FindClose OutputDebugStringW LocalFree EnumResourceNamesW CreateFileW FreeLibrary GetProcessHeap LeaveCriticalSection FindResourceExW GetFileSize LocalAlloc GetSystemTimeAsFileTime LoadResource UnhandledExceptionFilter ProcessIdToSessionId FormatMessageW lstrlenW SystemTimeToFileTime LoadLibraryExW HeapAlloc GetCurrentThreadId GetTimeZoneInformation LockResource FindResourceW HeapDestroy GetSystemTime DeleteCriticalSection CloseHandle SetUnhandledExceptionFilter RaiseException GetModuleHandleW HeapReAlloc EnterCriticalSection FindFirstFileW GetCurrentProcess VirtualAllocEx

gdi32

DeleteDC CreateCompatibleBitmap PatBlt CreateCompatibleDC SelectObject CreateDCW CreateSolidBrush DeleteObject GetObjectW

oleaut32

VarUI4FromStr

ole32

CoTaskMemAlloc CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoCreateGuid

user32

LoadImageW DestroyIcon DrawIconEx GetForegroundWindow CharNextW GetActiveWindow AllowSetForegroundWindow GetSystemMetrics GetDesktopWindow

winspool.drv

DocumentEvent EnumPrinterKeyA PrinterProperties DeletePrinterConnectionW EnumPrinterDataW GetPrintProcessorDirectoryA AddPrinterDriverA PrinterMessageBoxW WaitForPrinterChange SpoolerPrinterEvent DevQueryPrint GetPrinterA EnumPrintProcessorDatatypesW ExtDeviceMode

msrle32

DriverProc

Name

.MgTKJ

Size

2KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.gIabXEW

Size

2KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.text

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rMTvTr

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.JNknyQV

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CxDqC

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.IkzRZl

Size

1024B

Virtual Size

804B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

208KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.QFlMI

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lqItB

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.iMaG

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.QHuRWLj

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hZvUl

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

6dd2b63f93504932ff6e00b0f5f509f9_JaffaCakes118

kernel32

gdi32

oleaut32

ole32

user32

winspool.drv

msrle32

generic