a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118
Size 456KB
Sample241127-b64pfazqct
SHA256 3182ba79e38947d536804661f29254b22f0493e3d8195191425f413ad89523aa
MD5 a5419ce69fbe7b2b00ad1994cd626c6c
SHA1 aad8e0b2affc9e673120e298996898bc3be84c09
SHA512 f5ca35d6b880a37e9cc982f1ed9628420e3ef4e5fe7ae7b3af65e11927d7c3ecb3bb654a4db966c2ecab47c5e5f9ec2226225b59a2dfe91dff852a038fa23d24
SSDEEP 12288:dhz2CTUSJwndhZtUCa+7X5ahlJ3zZUPKN:T5T0ak5ClJ3WPK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118

File Explorer

a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118

.exe 456KB

a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118

IMPHASH a8070c6ad7600bbdd417216375913d93
SHA256 3182ba79e38947d536804661f29254b22f0493e3d8195191425f413ad89523aa
MD5 a5419ce69fbe7b2b00ad1994cd626c6c
SHA1 aad8e0b2affc9e673120e298996898bc3be84c09
SHA512 f5ca35d6b880a37e9cc982f1ed9628420e3ef4e5fe7ae7b3af65e11927d7c3ecb3bb654a4db966c2ecab47c5e5f9ec2226225b59a2dfe91dff852a038fa23d24
SSDEEP 12288:dhz2CTUSJwndhZtUCa+7X5ahlJ3zZUPKN:T5T0ak5ClJ3WPK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageA PropertySheetA

kernel32

GetTempFileNameA GetTempPathA GetModuleHandleA ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority CreateProcessA GetModuleFileNameA DeleteFileA RemoveDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA SetLastError CreateDirectoryA GetFileAttributesA GetFileSize CreateFileA CreateFileMappingA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange CloseHandle SetFileTime DosDateTimeToFileTime GetLastError FormatMessageA LocalFree FreeLibrary MultiByteToWideChar LoadLibraryA GetProcAddress lstrlenA MapViewOfFile UnmapViewOfFile

user32

MessageBoxA GetFocus wsprintfA SetCursor GetDlgItem SendDlgItemMessageA GetParent PostMessageA GetWindowRect MoveWindow LoadCursorA RegisterClassA CreateWindowExA ShowWindow UpdateWindow DefWindowProcA BeginPaint GetSystemMetrics EndPaint PeekMessageA TranslateMessage DispatchMessageA GetDC ReleaseDC SendMessageA SetDlgItemTextA

gdi32

SetBkMode SetTextColor DeleteObject CreateDIBitmap SelectObject CreateFontA CreateSolidBrush TextOutA

advapi32

RegCloseKey RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegQueryValueA

ole32

CoCreateInstance CoInitialize CoUninitialize

msvcr80

_unlock __dllonexit _lock _onexit _decode_pointer _except_handler4_common _invoke_watson _controlfp_s _strnicmp _stricmp _close _read _open _strdup _crt_debugger_hook __set_app_type _encode_pointer strchr memcpy memset strncat strcat strlen strcpy _localtime64 _time64 strtol free malloc _putenv _fstat64i32 fprintf __iob_func remove fread ftell fseek fopen fclose fflush freopen _snprintf strncpy strcmp strrchr _vsnprintf sscanf fwrite strftime sprintf isspace qsort realloc fgets strncmp __argv __argc _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _tempnam

Sharing

General

Malware Config

Signatures

File Explorer

a5419ce69fbe7b2b00ad1994cd626c6c_JaffaCakes118

comctl32

kernel32

user32

gdi32

advapi32

ole32

msvcr80

generic