JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165
Size 220KB
Sample250101-xflxla1jam
SHA256 cb6c79a3a5312a9b58cac59af0d467ce2ac555d5fcacd8daddb16e78bbdf1baf
MD5 6014279f4cfb2846e5bae34d7ee34165
SHA1 56a1e5abb064f163e0e37c9581bcbdf43bf9c2b1
SHA512 dca204af045f5a7db6316f8c1552734d4991be926816e7990f03e955f6b5dfe32f0764268ca49c880ae0a73948b87b1184e7984886048ac58b306a7a289de138
SSDEEP 6144:Zfmb8F966RVumMSOzzGJdoYKhv1PPGjr0/:RZumQfGqhv1XGjr0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165

File Explorer

JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165

.exe 220KB

JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165

IMPHASH aaf8214cc432ace11d4dbee7d0308433
SHA256 cb6c79a3a5312a9b58cac59af0d467ce2ac555d5fcacd8daddb16e78bbdf1baf
MD5 6014279f4cfb2846e5bae34d7ee34165
SHA1 56a1e5abb064f163e0e37c9581bcbdf43bf9c2b1
SHA512 dca204af045f5a7db6316f8c1552734d4991be926816e7990f03e955f6b5dfe32f0764268ca49c880ae0a73948b87b1184e7984886048ac58b306a7a289de138
SSDEEP 6144:Zfmb8F966RVumMSOzzGJdoYKhv1PPGjr0/:RZumQfGqhv1XGjr0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

184320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\JHL91\Desktop\CBN_1.0.0.3C\CBN\release\CBN.pdb

kernel32

GetCPInfo GetOEMCP HeapAlloc VirtualAlloc HeapReAlloc HeapFree GetProcessHeap RtlUnwind ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapDestroy HeapCreate CreateFileA GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA GetCurrentProcessId GlobalAddAtomA InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement GetModuleFileNameW WritePrivateProfileStringA CloseHandle GlobalFree GlobalUnlock FormatMessageA SetLastError SetErrorMode GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA FindResourceA LoadResource LockResource SizeofResource GlobalLock lstrcmpA GlobalAlloc FreeLibrary GetProcAddress GetSystemFirmwareTable lstrlenA WideCharToMultiByte MultiByteToWideChar InterlockedExchange CompareStringA GetLastError GetVersion LocalFree OutputDebugStringA GetModuleHandleA VirtualFree GetCommandLineA

user32

ShowWindow LoadCursorA GetSysColorBrush RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx CopyRect CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA GetWindow GetDlgCtrlID GetWindowRect GetWindowLongA GetClassNameA PtInRect GetWindowTextA PostQuitMessage PostMessageA SetWindowTextA GetSysColor ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA UnhookWindowsHookEx DestroyMenu GetClassInfoA UnregisterClassA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState ValidateRect GetCursorPos PeekMessageA GetKeyState SendMessageA IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx DefWindowProcA

gdi32

DeleteDC GetStockObject ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible GetDeviceCaps DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap PtVisible

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegEnumKeyA RegOpenKeyA RegDeleteKeyA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey

shlwapi

PathFindExtensionA PathFindFileNameA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_6014279f4cfb2846e5bae34d7ee34165

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

generic