7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118
Size 261KB
Sample241029-v38zjaymdm
SHA256 d5618b5bc09c91daaeb6d03bf02cde66f0068b13122562c0a40640294dc002bc
MD5 7c4f2907e33ffb5be48913bec666ee56
SHA1 eb0dd78fee134db93a1a2e1b631d2c6a91553e02
SHA512 2b1700c32192acb90f801bb4a61aed994ccce4c992f10b422ef929e20c52f2a6f73fe7841b66635d8af69482cdcada86f54371a1f45b98fc9c5479ee93baaa97
SSDEEP 6144:7ayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:/Cua88SEjbEwvpZBZQfZhh
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118

File Explorer

7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118

.exe 261KB

7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118

IMPHASH daaa849a0f5684c1f3f8f8d49dbe9af0
SHA256 d5618b5bc09c91daaeb6d03bf02cde66f0068b13122562c0a40640294dc002bc
MD5 7c4f2907e33ffb5be48913bec666ee56
SHA1 eb0dd78fee134db93a1a2e1b631d2c6a91553e02
SHA512 2b1700c32192acb90f801bb4a61aed994ccce4c992f10b422ef929e20c52f2a6f73fe7841b66635d8af69482cdcada86f54371a1f45b98fc9c5479ee93baaa97
SSDEEP 6144:7ayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:/Cua88SEjbEwvpZBZQfZhh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA FreeLibrary GetModuleHandleA InitializeCriticalSection GetLocalTime GetCurrentProcessId GetCurrentThreadId GetCurrentDirectoryA CreateMutexA LocalFree GetVersionExA GetLastError LoadLibraryA WaitForSingleObject ExitProcess RaiseException QueryPerformanceCounter GetTickCount HeapCreate IsBadWritePtr TlsAlloc SetUnhandledExceptionFilter GetACP GetOEMCP GetCPInfo GetCurrentProcess GetStartupInfoA GetEnvironmentStringsW IsBadReadPtr IsBadCodePtr GetSystemInfo MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA CreateDirectoryA GetProcAddress

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey InitializeSecurityDescriptor GetSidLengthRequired InitializeAcl InitializeSid GetSidSubAuthority AddAccessAllowedAce SetSecurityDescriptorDacl IsValidSecurityDescriptor

shell32

SHGetFolderPathA

msasn1

ASN1BEREncCheck ASN1BERDecGeneralizedTime ASN1_GetEncoderOption ASN1BEREncLength ASN1BERDecBool ASN1BERDecSXVal ASN1BEREncChar16String ASN1BERDecCharString ASN1BEREncChar32String ASN1char32string_free ASN1BEREncCharString ASN1CEREncUTCTime ASN1BERDecNull ASN1_SetDecoderOption ASN1bitstring_cmp ASN1char32string_cmp ASN1_CreateEncoder ASN1BERDecLength ASN1BEREncOpenType ASN1BEREncSX

msident

DllGetClassObject

Name

UPX1

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

86KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxVhJ

Size

4KB

Virtual Size

943KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

131KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7c4f2907e33ffb5be48913bec666ee56_JaffaCakes118

kernel32

advapi32

shell32

msasn1

msident

generic