JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70

General

Target
JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70
Size 595KB
Sample250103-ftnvnstldl
SHA256 a517dfbc9eb5e1956616771bf13f6289ad8fb4c49d473f5bff6e4e3fa105932d
MD5 6a6b69aa7473924e4902571d59ff2d70
SHA1 d626c75565385bf9ac72b313601088d13a5cf0d3
SHA512 f1847d178769c04ef16b1e850a03a6e479942c7c7b5c627df7d39cec429eb4d3f3beb277e44b25e162409e1a4c3c1ff97c5f306921c93c5e36cb34d7805d4009
SSDEEP 12288:xNXinJn6R5z1GUqMPCsbIWuh4epM+vxJd+18biBqMw3o7wVTK:xNyJn6R5zwUqMzcWuh4epMWF6wTVTK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70

File Explorer

JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70

.exe 595KB

JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70

IMPHASH 34b13c847810bd6458d17f352a75908b
SHA256 a517dfbc9eb5e1956616771bf13f6289ad8fb4c49d473f5bff6e4e3fa105932d
MD5 6a6b69aa7473924e4902571d59ff2d70
SHA1 d626c75565385bf9ac72b313601088d13a5cf0d3
SHA512 f1847d178769c04ef16b1e850a03a6e479942c7c7b5c627df7d39cec429eb4d3f3beb277e44b25e162409e1a4c3c1ff97c5f306921c93c5e36cb34d7805d4009
SSDEEP 12288:xNXinJn6R5z1GUqMPCsbIWuh4epM+vxJd+18biBqMw3o7wVTK:xNyJn6R5zwUqMzcWuh4epMWF6wTVTK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42u

ord5296 ord5298 ord2717 ord4074 ord4692 ord5303 ord5285 ord5710 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3396 ord3825 ord3826 ord3820 ord3074 ord4075 ord4616 ord4418 ord3733 ord561 ord815 ord800 ord1594 ord3341 ord4124 ord858 ord540 ord538 ord940 ord927 ord942 ord2755 ord5706 ord2606 ord2756 ord922 ord6919 ord4197 ord6218 ord6219 ord641 ord2506 ord324 ord1569 ord2388 ord5193 ord1089 ord3917 ord5727 ord2504 ord2546 ord6371 ord4480 ord535 ord825 ord1165

msvcrt

__p__commode __p__fmode __set_app_type ??1type_info@@UAE@XZ __dllonexit _onexit _controlfp _except_handler3 ?terminate@@YAXXZ _adjust_fdiv _initterm exit __CxxFrameHandler _wcsicmp _exit __setusermatherr wcscmp _wcmdln __wgetmainargs _cexit _c_exit _XcptFilter

kernel32

FindClose FindFirstFileW ExpandEnvironmentStringsW GetCurrentDirectoryW GetModuleHandleA GetStartupInfoW

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysFreeString

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_6a6b69aa7473924e4902571d59ff2d70

mfc42u

msvcrt

kernel32

ole32

oleaut32

shell32

generic