81398ede98e5ed4a258df4d95167bd2b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
81398ede98e5ed4a258df4d95167bd2b_JaffaCakes118
Size 216KB
Sample241031-cy9fdsypgp
SHA256 e0883b9aee2697bbdddb4705fd68f410cc7b56f54cce62d84d72de77304e84ed
MD5 81398ede98e5ed4a258df4d95167bd2b
SHA1 450a9ae08404d6509c69c84a432beb61b26b6e69
SHA512 83dab010024d3062584b28e9bf05418e06525268ababbcc4c281b912b2bde17de7785d308a40fde7f7452b77672d661910d1cc5c0cb2c6da51dd1de18c1b2985
SSDEEP 6144:sMIjjpISTju17N7WH41LHpXiLM2vj0HDqCOoeygOgu5k0c:fIj6ST07EYD9u6eygUk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ZZZVMP~1.EXE

File Explorer

81398ede98e5ed4a258df4d95167bd2b_JaffaCakes118

.cab 216KB
ZZZVMP~1.EXE

.exe 250KB

81398ede98e5ed4a258df4d95167bd2b_JaffaCakes118

SHA256 e0883b9aee2697bbdddb4705fd68f410cc7b56f54cce62d84d72de77304e84ed
MD5 81398ede98e5ed4a258df4d95167bd2b
SHA1 450a9ae08404d6509c69c84a432beb61b26b6e69
SHA512 83dab010024d3062584b28e9bf05418e06525268ababbcc4c281b912b2bde17de7785d308a40fde7f7452b77672d661910d1cc5c0cb2c6da51dd1de18c1b2985
SSDEEP 6144:sMIjjpISTju17N7WH41LHpXiLM2vj0HDqCOoeygOgu5k0c:fIj6ST07EYD9u6eygUk
MD5 SHA1 SHA512 SSDEEP

ZZZVMP~1.EXE

IMPHASH 0ebb3c09b06b1666d307952e824c8697
SHA256 edcf12512c0b2cbb1c5680ffd56ea020ac5723e7fcf476272bd20315fa18d6cc
MD5 a5604e31ed5ae25df2dfe72af47d8e15
SHA1 930320b599e50305475ba3c77f1c84ce234d4fa4
SHA512 8d9936e1599ea1748aae0212a1efa5dbb23365c6cfceba8c2a8f47554e4d5ddcddb317bca4c6489a9e824e064a5d5d3fe0448da54e8029952f747c86daa31346
SSDEEP 6144:q/kuouETjkfHN7VH4tFHpXmLM2vj0jJNbLoJt0wy0Y6Osh:qJ7ETQHfY1FLoJlnHh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA GetModuleFileNameA GetSystemDirectoryA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA ExpandEnvironmentStringsA lstrcpyA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA lstrcmpiA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA FreeResource GetProcAddress LoadResource SizeofResource FindResourceA lstrcatA CloseHandle WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetCurrentDirectoryA GetTempFileNameA ExitProcess CreateFileA LoadLibraryExA lstrcpynA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA GetVersionExA GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA GetModuleHandleA GetStartupInfoA GetCommandLineA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter ReadFile LoadLibraryA GetDiskFreeSpaceA MulDiv EnumResourceLanguagesA FreeLibrary LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx wsprintfA CharNextA CharUpperA CharPrevA SetWindowLongA GetWindowLongA CallWindowProcA DispatchMessageA MsgWaitForMultipleObjects PeekMessageA SendMessageA SetWindowPos ReleaseDC GetDC GetWindowRect SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA EndDialog GetDesktopWindow MessageBeep SetDlgItemTextA LoadStringA GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

81398ede98e5ed4a258df4d95167bd2b_JaffaCakes118

ZZZVMP~1.EXE

advapi32

kernel32

gdi32

user32

comctl32

version

generic