966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118
Size 263KB
Sample241124-wye2bsymcj
SHA256 ead01347a66d096566c031869547f3696993d91fe988d3a710c79e751a27c035
MD5 966849d0461af372e2d5d6bc6256d5ce
SHA1 8873f7fd57664fe3d727a30720f72612a64a97e6
SHA512 420e1dfa64bcd8622ce5de1e368c5415eeff395a4b1f9a37a136d588d485ec89f4a0b3f13226d561f78089cb7140b95aa793ec4c511d47ed9715205328b84d88
SSDEEP 6144:09ooxmU1fIhiEELvPN3gt4eO3voL6to4dtUBrUHF:09HX1fwavPNQOeO3vqUn3UhcF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118

File Explorer

966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118

.exe 263KB

966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118

IMPHASH 62263ff6057708a3be99e9402914098e
SHA256 ead01347a66d096566c031869547f3696993d91fe988d3a710c79e751a27c035
MD5 966849d0461af372e2d5d6bc6256d5ce
SHA1 8873f7fd57664fe3d727a30720f72612a64a97e6
SHA512 420e1dfa64bcd8622ce5de1e368c5415eeff395a4b1f9a37a136d588d485ec89f4a0b3f13226d561f78089cb7140b95aa793ec4c511d47ed9715205328b84d88
SSDEEP 6144:09ooxmU1fIhiEELvPN3gt4eO3voL6to4dtUBrUHF:09HX1fwavPNQOeO3vqUn3UhcF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16875

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysFreeString SysAllocString SysAllocStringByteLen SafeArrayDestroy SysStringLen SysReAllocStringLen VariantClear SysStringByteLen GetErrorInfo

ole32

CoTaskMemRealloc StringFromGUID2 CoTaskMemFree CoTaskMemAlloc CoUninitialize CoInitializeEx CoCreateInstance

shlwapi

PathRemoveFileSpecA PathAppendA

shell32

SHCreateDirectoryExW

kernel32

SetFilePointer CreateThread OutputDebugStringW CloseHandle GetConsoleOutputCP CreateFileMappingA MapViewOfFileEx LoadLibraryExW UnhandledExceptionFilter GetCurrentThreadId SizeofResource TlsGetValue QueryPerformanceFrequency GetSystemTimeAsFileTime FindClose SwitchToThread FindResourceExW GetFileType TlsSetValue WaitForMultipleObjects FindResourceW DeleteFileW InitializeCriticalSectionAndSpinCount HeapReAlloc LockResource GetProcessHeap UnmapViewOfFile GetTempPathA HeapAlloc FindNextFileW FindFirstFileW IsDebuggerPresent FormatMessageA GetTempFileNameA RaiseException LeaveCriticalSection CompareFileTime FindResourceA GetACP GetConsoleMode GetUserDefaultUILanguage TlsAlloc TlsFree CreateFileA SetUnhandledExceptionFilter HeapSize FreeLibrary ReleaseMutex CreateEventA HeapFree WriteFile IsProcessorFeaturePresent HeapDestroy EnterCriticalSection AllocConsole DeleteCriticalSection WaitForSingleObject GetModuleHandleW WideCharToMultiByte GetSystemInfo LoadResource GetCurrentDirectoryA VirtualAlloc

advapi32

CryptGenRandom CryptReleaseContext

user32

CharLowerW GetWindowLongA

comctl32

CreateStatusWindow DllGetVersion ShowHideMenuCtl MenuHelp InitCommonControlsEx FlatSB_SetScrollInfo ImageList_DragEnter CreateToolbar

msls31

LsQueryLineDup LsGetWarichuLsimethods LsdnFinishBySubline LsdnResetPenNode LsdnGetDup LsPointUV2FromPointUV1 LsFinishCurrentSubline

Sharing

General

Malware Config

Signatures

File Explorer

966849d0461af372e2d5d6bc6256d5ce_JaffaCakes118

oleaut32

ole32

shlwapi

shell32

kernel32

advapi32

user32

comctl32

msls31

generic