JaffaCakes118_69c7ad2356804730f52e986ee29c54a0

General

Target
JaffaCakes118_69c7ad2356804730f52e986ee29c54a0
Size 768KB
Sample250103-dbvt6awngt
SHA256 4ff161385d98342b9bb23c075c59a43d40605fba3048b66cb368b8b4a7b17769
MD5 69c7ad2356804730f52e986ee29c54a0
SHA1 33629b933354c2eacaa9a64d8367a0d0fd6eafdb
SHA512 d80e668953ba6d5d35a7b3ff47eb08254bf6968a6350207a948d8a6e1365b9da949773f751a482647c114ba581f573b3bd65bd1b60336c613e21a1f242697681
SSDEEP 12288:VKPaGOUvDGBmEnO7D9JcmrZS5f73+TZuZ7SN8UgSucVusyi9alrcI3u:IPaGKBVO7DP7873iZuYaWucEsJEcI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_69c7ad2356804730f52e986ee29c54a0

File Explorer

JaffaCakes118_69c7ad2356804730f52e986ee29c54a0

.exe 768KB

JaffaCakes118_69c7ad2356804730f52e986ee29c54a0

IMPHASH 922874160708e7bfa73cac0d59c42034
SHA256 4ff161385d98342b9bb23c075c59a43d40605fba3048b66cb368b8b4a7b17769
MD5 69c7ad2356804730f52e986ee29c54a0
SHA1 33629b933354c2eacaa9a64d8367a0d0fd6eafdb
SHA512 d80e668953ba6d5d35a7b3ff47eb08254bf6968a6350207a948d8a6e1365b9da949773f751a482647c114ba581f573b3bd65bd1b60336c613e21a1f242697681
SSDEEP 12288:VKPaGOUvDGBmEnO7D9JcmrZS5f73+TZuZ7SN8UgSucVusyi9alrcI3u:IPaGKBVO7DP7873iZuYaWucEsJEcI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA UnmapViewOfFile CloseHandle MapViewOfFile CreateFileMappingA OpenFileMappingA ExitProcess WaitForSingleObject CreateEventA Sleep SetEvent OpenEventA DeleteFileA GetModuleFileNameA CreateFileA GetDriveTypeA CreateProcessA GetSystemDirectoryA GetTempFileNameA GetTempPathA WinExec GetLastError CreateMutexA CreateThread GetStringTypeA LCMapStringW SetFileAttributesA CopyFileA FindNextFileA FindClose GetFileAttributesA WriteFile lstrlenA GetStringTypeW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc VirtualAlloc

user32

wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegCloseKey RegDeleteKeyA RegCreateKeyExA

shell32

ShellExecuteA

wininet

InternetReadFile InternetCloseHandle InternetOpenUrlA InternetOpenA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_69c7ad2356804730f52e986ee29c54a0

kernel32

user32

advapi32

shell32

wininet

generic