73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118
Size 286KB
Sample241024-p24qjasbkm
SHA256 283bf7f8bf27d337d29b53073b0ec2e017840a2ec5f46cd9e75d0206f1a53e82
MD5 73d0b5ec5460ae7742815c0a3db0316b
SHA1 7248f2f6d1df09037ae4c1228c2493d378aaf67a
SHA512 1ffe6d8563da0c9d9524441606a7fa2cbbe69820e9003fb2db91a5c8c6233bc2a224da8218d73462aa7f785a420b92d56033c6da2f9fdb27f361c684158577b8
SSDEEP 6144:YzdQANkh/dV/JxzVCn/GdqN/fYFDVAFCacgh:4WKkhvH5QtN/ACNPh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118

File Explorer

73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118

.exe 286KB

73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118

IMPHASH 2af5c42d70c62bda752d5820a7bbae59
SHA256 283bf7f8bf27d337d29b53073b0ec2e017840a2ec5f46cd9e75d0206f1a53e82
MD5 73d0b5ec5460ae7742815c0a3db0316b
SHA1 7248f2f6d1df09037ae4c1228c2493d378aaf67a
SHA512 1ffe6d8563da0c9d9524441606a7fa2cbbe69820e9003fb2db91a5c8c6233bc2a224da8218d73462aa7f785a420b92d56033c6da2f9fdb27f361c684158577b8
SSDEEP 6144:YzdQANkh/dV/JxzVCn/GdqN/fYFDVAFCacgh:4WKkhvH5QtN/ACNPh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathIsUNCA

ole32

CoInitializeEx CoUninitialize StringFromCLSID CoTaskMemFree CoCreateInstance

oleaut32

SafeArrayCopy SafeArrayGetLBound SysAllocString VariantCopy SafeArrayGetUBound SafeArrayLock GetErrorInfo VariantChangeType VariantClear SysFreeString SysAllocStringLen VariantInit SafeArrayDestroy SafeArrayUnlock

kernel32

GetSystemTimeAsFileTime MapViewOfFile GetFullPathNameA CreateEventA UnmapViewOfFile CreateMutexA EnterCriticalSection FreeLibrary FindResourceExA HeapFree FindResourceA FindClose MoveFileA DeleteCriticalSection RemoveDirectoryA FindFirstFileA PulseEvent LocalAlloc FindNextFileA WriteFile HeapSize CreateSemaphoreA CreateFileMappingA FormatMessageA DeleteFileA ReleaseMutex WaitForMultipleObjects LockResource GetUserDefaultLCID ReleaseSemaphore SetProcessWorkingSetSize TlsGetValue GetProcessHeap SetFilePointer SetFileAttributesA GetThreadLocale lstrcmpiA ReadFile OpenEventA HeapReAlloc LoadResource LCMapStringA WideCharToMultiByte HeapDestroy CreateDirectoryA WaitForSingleObject TlsSetValue HeapAlloc lstrlenA OpenProcess GetACP GetModuleHandleA CloseHandle GetCurrentThreadId LeaveCriticalSection lstrlenW CreateFileA SizeofResource OpenFileMappingA CopyFileA RaiseException LocalFree LoadLibraryW VirtualAlloc

user32

ExitWindowsEx wsprintfA LoadStringA

rpcrt4

RpcStringFreeA UuidFromStringA UuidToStringA

mpr

WNetAddConnection2A WNetCancelConnection2A

esent

JetCreateTable JetBeginTransaction JetAddColumn JetDeleteColumn JetGetLogInfo JetEndExternalBackup JetAttachDatabase2 JetGetSystemParameter JetResetTableSequential JetGetLogInfoInstance JetOSSnapshotFreeze JetUpdate JetReadFileInstance JetGrowDatabase JetDefragment JetSetDatabaseSize JetDelete JetIdle JetCompact JetMakeKey JetReadFile

netplwiz

DllGetClassObject

Sharing

General

Malware Config

Signatures

File Explorer

73d0b5ec5460ae7742815c0a3db0316b_JaffaCakes118

shlwapi

ole32

oleaut32

kernel32

user32

rpcrt4

mpr

esent

netplwiz

generic