7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118
Size 256KB
Sample241030-ppzaaavldm
SHA256 24120b00fbe1ce383413014ae30b24f86f4729a9c000ea0b076fd7f19273dfe6
MD5 7f36b259d78869ecffccb70a09be8f7c
SHA1 11a8ed32078c54825c88bbbded9a1e5c18205108
SHA512 1368c322af5073820499d3f5604b466a69ce9ae2103e16f73f55c581fa71c0803ee74bc835e9fc06a4ecffe434b3fc6bc24f8eaa443b12226cbe1626a4818654
SSDEEP 6144:umQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:FSszoK83dvkao2FiqicM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118

File Explorer

7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118

.exe 256KB

7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118

IMPHASH 8092cf2c283bf7882fbb87f0a3f3ad45
SHA256 24120b00fbe1ce383413014ae30b24f86f4729a9c000ea0b076fd7f19273dfe6
MD5 7f36b259d78869ecffccb70a09be8f7c
SHA1 11a8ed32078c54825c88bbbded9a1e5c18205108
SHA512 1368c322af5073820499d3f5604b466a69ce9ae2103e16f73f55c581fa71c0803ee74bc835e9fc06a4ecffe434b3fc6bc24f8eaa443b12226cbe1626a4818654
SSDEEP 6144:umQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:FSszoK83dvkao2FiqicM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetTimeFromSystemTimeA

gdi32

CreateCompatibleDC GetObjectA DeleteObject CreateCompatibleBitmap DeleteDC SelectObject GetBitmapBits GetDeviceCaps CreateDCA BitBlt

kernel32

LoadLibraryExW CloseHandle FindResourceExW GetFileSize SystemTimeToFileTime CreateFileW GetTempPathW ReadFile LocalFree HeapDestroy LoadResource GetTempFileNameW RaiseException SetUnhandledExceptionFilter DeleteCriticalSection IsDebuggerPresent OutputDebugStringW FindResourceW UnmapViewOfFile MapViewOfFile GetCurrentThreadId UnhandledExceptionFilter GetSystemTimeAsFileTime HeapAlloc HeapFree CreateFileMappingW FreeLibrary GetSystemTime LeaveCriticalSection GetProcessHeap GlobalFree LockResource lstrlenA WideCharToMultiByte EnterCriticalSection SizeofResource lstrlenW LocalAlloc HeapReAlloc HeapSize SetLastError SetErrorMode VirtualAllocEx GetModuleHandleW

winspool.drv

SetPrinterA QueryRemoteFonts DEVICECAPABILITIES SpoolerPrinterEvent EnumPrintersA SetPrinterDataExW EnumJobsA AdvancedDocumentPropertiesA FindFirstPrinterChangeNotification SetPrinterDataA GetPrinterDriverDirectoryW EnumPrintersW DeletePrintProcessorW AddJobA EnumPortsA DocumentPropertySheets

mmcbase

?s_dwMainThreadID@SC@mmcerror@@0KA

Name

.wOfE

Size

2KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.cwwxqM

Size

1024B

Virtual Size

30KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.text

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.GNdttAh

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wuaM

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vuPsD

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.NjnPj

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yEDgYb

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xYFdKBM

Size

512B

Virtual Size

501B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.AeZHS

Size

1024B

Virtual Size

728B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.blAMbD

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.XPTZiZG

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

7f36b259d78869ecffccb70a09be8f7c_JaffaCakes118

wininet

gdi32

kernel32

winspool.drv

mmcbase

generic