8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118
Size 254KB
Sample241103-c2e1yssdpd
SHA256 832106f4381b58b4ac7a12d0a92dd22a3554a1d23e414c5fb5c5ea5274740d88
MD5 8936cb202a1f1f2bfa987d1ad0b2fe5c
SHA1 a7372fa3bf23aba53302ca1252cb796823619a52
SHA512 dcd3766bdfcecd471390d9bc33ce2b6ef9e0610ccd30387600d01e3a8c4d319284e4c7b30694897e5ac3c0aeb214ce0c0ee23975b86e2b9c52628945058df51c
SSDEEP 6144:BMDzfNmz6rIPGk0gFdJvbizOz8mg+es9ejK8FU:BwzfNu3Ok0gFdJGzc8LDaejzU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118

File Explorer

8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118

.exe 254KB

8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118

IMPHASH d614fe385b3a3f084955c5937ddbff2a
SHA256 832106f4381b58b4ac7a12d0a92dd22a3554a1d23e414c5fb5c5ea5274740d88
MD5 8936cb202a1f1f2bfa987d1ad0b2fe5c
SHA1 a7372fa3bf23aba53302ca1252cb796823619a52
SHA512 dcd3766bdfcecd471390d9bc33ce2b6ef9e0610ccd30387600d01e3a8c4d319284e4c7b30694897e5ac3c0aeb214ce0c0ee23975b86e2b9c52628945058df51c
SSDEEP 6144:BMDzfNmz6rIPGk0gFdJvbizOz8mg+es9ejK8FU:BwzfNu3Ok0gFdJGzc8LDaejzU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12963

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetFileInfoA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

user32

LockWindowUpdate SetFocus EnumThreadWindows DrawIconEx PostMessageA GetSystemMetrics DestroyIcon LoadIconA

kernel32

FormatMessageA FreeLibrary FileTimeToSystemTime GetCommandLineW SystemTimeToTzSpecificLocalTime GetSystemDirectoryA lstrcmpiA WideCharToMultiByte HeapAlloc GetProcessHeap GetWindowsDirectoryA OutputDebugStringA DeleteCriticalSection SetLastError LoadLibraryExA GetTimeZoneInformation GetModuleHandleA HeapFree GetCurrentThreadId CloseHandle LocalFree LoadLibraryW VirtualAllocEx

advapi32

FreeSid OpenProcessToken RegOpenKeyExA GetTokenInformation AllocateAndInitializeSid EqualSid RegCloseKey RegQueryValueExA

comdlg32

GetOpenFileNameW

oleaut32

SysFreeString SysAllocStringLen

ole32

CoInitialize CoCreateInstance CoUninitialize

wsock32

inet_addr ioctlsocket

winspool.drv

OpenPrinterW AddJobW DeviceMode AddMonitorW WritePrinter PerfClose DocumentPropertiesA SetFormW ConfigurePortW EnumPrintProcessorDatatypesW StartDocDlgA EndDocPrinter AddJobA

getuname

GetUName

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.epGy

Size

512B

Virtual Size

343B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ZOQgL

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.klbLD

Size

512B

Virtual Size

213B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gAwv

Size

512B

Virtual Size

346B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.oVbmdu

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.exyIC

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.DACOLr

Size

106KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

111KB

Virtual Size

622KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nUNksu

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.otvWDN

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ikIbk

Size

512B

Virtual Size

344B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yurLJo

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

8936cb202a1f1f2bfa987d1ad0b2fe5c_JaffaCakes118

shell32

version

user32

kernel32

advapi32

comdlg32

oleaut32

ole32

wsock32

winspool.drv

getuname

generic