JaffaCakes118_629199afeda9dbe62ef768420b61fdd5

General

Target
JaffaCakes118_629199afeda9dbe62ef768420b61fdd5
Size 1.1MB
Sample250102-erctysvnfn
SHA256 802e398c062decdfe2587c6df59d654148e98e7efda58331fa4556601c711089
MD5 629199afeda9dbe62ef768420b61fdd5
SHA1 fb437092bb2e10044f32d3043d9271bc0277504a
SHA512 43cc313f7751df556242cc8b3606238fc6ec97b8618c57351cbf23de6c75a9a5cd10ab1072461935f879900f5b08ba8179c906aad384780a2426d54812328dc3
SSDEEP 24576:364MVTxmEqHWBY8BRGROwq0EQrMYFASmwhAC2GUHFixKOhju7D:364MTxXRGUJ0trMY7AcUUsWju
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_629199afeda9dbe62ef768420b61fdd5

File Explorer

JaffaCakes118_629199afeda9dbe62ef768420b61fdd5

.exe 1.1MB

JaffaCakes118_629199afeda9dbe62ef768420b61fdd5

IMPHASH 2b41fe54eab802d554dcf2e5a39a7f11
SHA256 802e398c062decdfe2587c6df59d654148e98e7efda58331fa4556601c711089
MD5 629199afeda9dbe62ef768420b61fdd5
SHA1 fb437092bb2e10044f32d3043d9271bc0277504a
SHA512 43cc313f7751df556242cc8b3606238fc6ec97b8618c57351cbf23de6c75a9a5cd10ab1072461935f879900f5b08ba8179c906aad384780a2426d54812328dc3
SSDEEP 24576:364MVTxmEqHWBY8BRGROwq0EQrMYFASmwhAC2GUHFixKOhju7D:364MTxXRGUJ0trMY7AcUUsWju
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetModuleFileNameW CreateFileW GetProcAddress CloseHandle GetWindowsDirectoryW LocalFree lstrcpyW GetLastError HeapFree HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue GetSystemDirectoryW TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleW CreateDirectoryW LoadResource FreeLibrary TlsAlloc FindResourceW

user32

SendMessageW FindWindowW

shlwapi

StrCpyW PathFileExistsW PathRemoveFileSpecW PathAppendW

advapi32

AllocateAndInitializeSid SetSecurityInfo SetEntriesInAclW FreeSid GetSecurityInfo

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_629199afeda9dbe62ef768420b61fdd5

kernel32

user32

shlwapi

advapi32

generic