825b194eec250701c1a2d5576410e408_JaffaCakes118

General

Target
825b194eec250701c1a2d5576410e408_JaffaCakes118
Size 184KB
Sample241031-jp48msvrbl
SHA256 db55377d8affa759a05050fbe1de575e0ab0949c8858292ab9bbfd3a8dd211bf
MD5 825b194eec250701c1a2d5576410e408
SHA1 b3dd0917da1d95680a8897c12144228e14a52100
SHA512 fdceb3fd02ce771c8439747b9211b79c7024543bc65703dde7c4510c32daa96cf9521f55e71f434163b903314789d21bd452fb6704469ac7bb16e67de0fc9d1a
SSDEEP 3072:cVi/IbhPRQaEjDuCy0iL0F0OJDcYZ+MAFwzYRw3s3lB7USot5+LW6ax:0sQEN1iQwM2wz+SsVB7Vi6ax
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
825b194eec250701c1a2d5576410e408_JaffaCakes118

File Explorer

825b194eec250701c1a2d5576410e408_JaffaCakes118

.exe 184KB

825b194eec250701c1a2d5576410e408_JaffaCakes118

IMPHASH 998e61d6710cb3a6dd7148e1a6e829e1
SHA256 db55377d8affa759a05050fbe1de575e0ab0949c8858292ab9bbfd3a8dd211bf
MD5 825b194eec250701c1a2d5576410e408
SHA1 b3dd0917da1d95680a8897c12144228e14a52100
SHA512 fdceb3fd02ce771c8439747b9211b79c7024543bc65703dde7c4510c32daa96cf9521f55e71f434163b903314789d21bd452fb6704469ac7bb16e67de0fc9d1a
SSDEEP 3072:cVi/IbhPRQaEjDuCy0iL0F0OJDcYZ+MAFwzYRw3s3lB7USot5+LW6ax:0sQEN1iQwM2wz+SsVB7Vi6ax
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess LeaveCriticalSection GetTempPathW GetComputerNameW GetHandleInformation SetConsoleMode RemoveDirectoryW PrepareTape WritePrivateProfileStructA InitializeCriticalSection lstrcmpiW GetFileAttributesA GetWindowsDirectoryA PurgeComm EnumDateFormatsW GetCommandLineW CompareStringA WriteConsoleOutputW FormatMessageA SetThreadLocale GetCurrentProcessId OutputDebugStringA CreateProcessA GetLocaleInfoW GetFileType GetConsoleMode WritePrivateProfileSectionW CreateMutexA SetMailslotInfo IsValidLocale PeekConsoleInputW SearchPathW IsDBCSLeadByteEx ReadFile GetTickCount SetHandleCount GetDriveTypeW EnumCalendarInfoW ReadDirectoryChangesW GetThreadContext VirtualAlloc lstrcpynA GetEnvironmentStringsW GetSystemDefaultLangID GlobalFlags EnumSystemCodePagesA SuspendThread GetPrivateProfileStringA OutputDebugStringW GetVolumeInformationW

user32

ClientToScreen DrawStateA IsCharLowerA CallNextHookEx SetWinEventHook TranslateMDISysAccel UnhookWindowsHookEx CheckMenuItem SendMessageTimeoutA MoveWindow AppendMenuA DrawTextExA

msvcrt

vfprintf _mbslwr _beginthread _wctime wcsspn _mbsupr freopen toupper abort _spawnvp iswascii fseek _ecvt _mbsnextc wctomb _wcsicoll _ltoa _chsize _tempnam swprintf fputc _ui64tow strchr

Sharing

General

Malware Config

Signatures

File Explorer

825b194eec250701c1a2d5576410e408_JaffaCakes118

kernel32

user32

msvcrt

generic