85363100924b6711c13b0a6272d4fc7c_JaffaCakes118

General

Target
85363100924b6711c13b0a6272d4fc7c_JaffaCakes118
Size 4.5MB
Sample241102-nlg16atbpr
SHA256 b79239e2c6e4d15fc56f7743c146c855b01faef5ee6295dd933da30885148709
MD5 85363100924b6711c13b0a6272d4fc7c
SHA1 97659066773876e892483e4d3cdf1cfdd4414dad
SHA512 245449a91fca024b8a959059adc4b086a954a98e5022e49796bcbb5916755e1aed94aedb9e7f2abce9d3e4e7c19950a9f689ea3c4180cf813056d0d3ea9395ba
SSDEEP 98304:Xa4qqEJg2m6wCuKWqTx5+L2kPuV/Yy2lHJNI/Uw/bpehymCT6Di:qq6g2m6wCp9QCUXqMw/yhCU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85363100924b6711c13b0a6272d4fc7c_JaffaCakes118

File Explorer

85363100924b6711c13b0a6272d4fc7c_JaffaCakes118

.exe 4.5MB

85363100924b6711c13b0a6272d4fc7c_JaffaCakes118

IMPHASH 3808cf5755aac20ce0592be1a9bc0f0d
SHA256 b79239e2c6e4d15fc56f7743c146c855b01faef5ee6295dd933da30885148709
MD5 85363100924b6711c13b0a6272d4fc7c
SHA1 97659066773876e892483e4d3cdf1cfdd4414dad
SHA512 245449a91fca024b8a959059adc4b086a954a98e5022e49796bcbb5916755e1aed94aedb9e7f2abce9d3e4e7c19950a9f689ea3c4180cf813056d0d3ea9395ba
SSDEEP 98304:Xa4qqEJg2m6wCuKWqTx5+L2kPuV/Yy2lHJNI/Uw/bpehymCT6Di:qq6g2m6wCp9QCUXqMw/yhCU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rat.pdb

kernel32

GetFileSize SetPriorityClass GetNativeSystemInfo SetFilePointer CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA WriteConsoleInputA GetComputerNameW SetEvent FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW FindResourceExA GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW InitAtomTable GetFileAttributesA SetConsoleCursorPosition GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW lstrlenW GlobalUnlock CreateDirectoryA ReleaseActCtx EnumResourceNamesW OpenMutexW GetHandleInformation GetProcAddress GetProcessHeaps ReadFileEx SetComputerNameA LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx GetSystemTime LCMapStringW AreFileApisANSI GetStartupInfoA FileTimeToDosDateTime CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WideCharToMultiByte LCMapStringA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP GetModuleHandleA

user32

GetMonitorInfoA

gdi32

GetCharWidthW

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

85363100924b6711c13b0a6272d4fc7c_JaffaCakes118

kernel32

user32

gdi32

msimg32

generic