87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118
Size 261KB
Sample241102-zhleysvjfy
SHA256 a6f4d1be946ffcbbd5d96a122662319ff4530fe9a8b19e576fcec6666052eb25
MD5 87a261e2cc3f0d99477932c002c25a0e
SHA1 3909d7068c97c001242737bc9be82df2e99dc12d
SHA512 2665d5148f94725751e3ad73b6285c7726ef6b98da4a8ece95d538c8e080c4f8c73e3920896752742d1c1ea2d9176d990e524ddeb7b98d09241cd88b2639fa95
SSDEEP 3072:ZYUb5QoJ4g+Ri+ZjKIz1ZdW4SrOLVSVpb:ZY7xhKSZI4zLVSVpb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118

File Explorer

87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118

.exe 261KB

87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118

IMPHASH 84a5c39eb178b6e678403c890a52017c
SHA256 a6f4d1be946ffcbbd5d96a122662319ff4530fe9a8b19e576fcec6666052eb25
MD5 87a261e2cc3f0d99477932c002c25a0e
SHA1 3909d7068c97c001242737bc9be82df2e99dc12d
SHA512 2665d5148f94725751e3ad73b6285c7726ef6b98da4a8ece95d538c8e080c4f8c73e3920896752742d1c1ea2d9176d990e524ddeb7b98d09241cd88b2639fa95
SSDEEP 3072:ZYUb5QoJ4g+Ri+ZjKIz1ZdW4SrOLVSVpb:ZY7xhKSZI4zLVSVpb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

crtdll

memset strlen _strnicmp strncmp strncpy strcpy atof strcat localtime mktime gmtime

user32

wsprintfA GetWindowThreadProcessId KillTimer SetTimer wvsprintfA MessageBoxA IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows GetWindowLongA CallWindowProcA DefWindowProcA SetWindowLongA SetWindowTextA DestroyWindow SendMessageA CreateWindowExA LoadCursorA LoadIconA RegisterClassA GetSysColor PeekMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA AdjustWindowRect GetSystemMetrics GetWindowRect ShowWindow GetMessageA GetClassNameA PostMessageA GetParent GetWindow SetWindowPos SetFocus SetActiveWindow UnregisterClassA DestroyAcceleratorTable GetFocus IsChild EnumChildWindows GetKeyState CreateAcceleratorTableA SetCursorPos LoadImageA SetCursor SystemParametersInfoA SetCapture GetCursorPos MapWindowPoints ReleaseCapture MoveWindow

advapi32

RegCreateKeyA RegSetValueExA RegCloseKey

wininet

InternetOpenA InternetOpenUrlA InternetReadFile InternetCloseHandle

oleaut32

SysAllocStringLen SysFreeString SysAllocString

ole32

CoInitialize CoCreateInstance CoUninitialize

urlmon

URLDownloadToFileA

gdi32

GetStockObject CreateBrushIndirect

comctl32

InitCommonControls

kernel32

GetModuleHandleA GetCommandLineA ExitProcess HeapCreate GetSystemDirectoryA GetModuleFileNameA LoadLibraryA GetProcAddress GlobalAlloc OpenProcess CloseHandle GetLastError GetEnvironmentVariableA GetCurrentDirectoryA SystemTimeToFileTime GetFileAttributesA SetFileAttributesA CreateFileA SetFileTime GetFileTime HeapDestroy HeapReAlloc FreeLibrary HeapAlloc IsBadReadPtr HeapFree GlobalFree MultiByteToWideChar WideCharToMultiByte SetUnhandledExceptionFilter GetVersionExA GetCurrentThreadId GetCurrentProcessId WaitForSingleObject GetTickCount Sleep FindClose FindFirstFileA FindNextFileA ReadFile SetFilePointer GetFileSize WriteFile GetLocalTime

shell32

ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

87a261e2cc3f0d99477932c002c25a0e_JaffaCakes118

crtdll

user32

advapi32

wininet

oleaut32

ole32

urlmon

gdi32

comctl32

kernel32

shell32

generic