JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e
Size 556KB
Sample250102-2f7xaa1par
SHA256 3e4d2e502eec7e44c49f885a27faaac5cdd2b0fc5a1d8a77a85e6c4ed2e0764b
MD5 689d7efa15a77b10c936cb405c3a2b6e
SHA1 e2d29fe0377f85f96af8712bb18ead74282880e9
SHA512 1713db74ca49414d4084b3a433e371454fa4ab716c334cfe7f785e7dd8180586c5b921a50a6c45dd535cef06d5e16a940f97ff346c1d457f02e50a5b7a7eae43
SSDEEP 12288:rmf2zeomuWNuyOXvh7avwXXtTk/D7kKzyz0Et7p:o2zouRpvdAMmLc7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e

File Explorer

JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e

.exe 556KB

JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e

IMPHASH d0334b67a274f1232885a72adc47afd7
SHA256 3e4d2e502eec7e44c49f885a27faaac5cdd2b0fc5a1d8a77a85e6c4ed2e0764b
MD5 689d7efa15a77b10c936cb405c3a2b6e
SHA1 e2d29fe0377f85f96af8712bb18ead74282880e9
SHA512 1713db74ca49414d4084b3a433e371454fa4ab716c334cfe7f785e7dd8180586c5b921a50a6c45dd535cef06d5e16a940f97ff346c1d457f02e50a5b7a7eae43
SSDEEP 12288:rmf2zeomuWNuyOXvh7avwXXtTk/D7kKzyz0Et7p:o2zouRpvdAMmLc7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13869

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ResetEvent WaitForSingleObject OpenEventW CreateEventW LoadLibraryW GetSystemDirectoryW CloseHandle CreateFileW FreeLibrary SetEvent GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter CreateMutexW GetLastError GetProcAddress ReleaseMutex GetSystemInfo VirtualProtect GetLocaleInfoA SetStdHandle GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar SetFilePointer VirtualQuery InterlockedExchange RtlUnwind HeapReAlloc VirtualAlloc Sleep GetCPInfo GetOEMCP GetACP LoadLibraryA VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount FlushFileBuffers GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile ExitProcess GetStartupInfoA GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

user32

LoadStringW LoadImageW WaitMessage CreatePopupMenu AppendMenuW SetMenuDefaultItem UnregisterDeviceNotification RegisterDeviceNotificationW LoadCursorW RegisterClassW CreateWindowExW IsWindow SetTimer SetForegroundWindow GetCursorPos TrackPopupMenu DestroyMenu PostQuitMessage DefWindowProcW PeekMessageW TranslateMessage DispatchMessageW

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiDeleteDeviceInterfaceData SetupDiGetClassDevsExW SetupDiCreateDeviceInfoList SetupDiGetDeviceInstanceIdW SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList

shell32

Shell_NotifyIconW

ole32

StringFromGUID2

winmm

waveOutMessage

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_689d7efa15a77b10c936cb405c3a2b6e

kernel32

advapi32

user32

setupapi

shell32

ole32

winmm

generic