JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

General

Target
JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275
Size 304KB
Sample250103-j2selsykdk
SHA256 ebbe606610e9dc3743fde753ada6fbaa34b7aa230e585eedb2bebb1154cb6ebe
MD5 6b4b10e0f21a3f0ddb5dda5f6973a275
SHA1 032e71848ad28396274514227fde86df3308a8da
SHA512 4cc68a9a83a3417fb659df886673fc0f28346a5a7a08cedd54fe1e4ba81069deb033e243b2638fc83ee4d4adeda245dd6fb6bafd98c3050ad850617446b43a1b
SSDEEP 6144:340dRt+g0QPekyswLCwuSr08hKZFXZoMq3+:o07h0igTx9nXMO+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

File Explorer

JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

.dll 304KB

JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

IMPHASH 4920d3c7fb9fb7adbbdf46909e0bbf62
SHA256 ebbe606610e9dc3743fde753ada6fbaa34b7aa230e585eedb2bebb1154cb6ebe
MD5 6b4b10e0f21a3f0ddb5dda5f6973a275
SHA1 032e71848ad28396274514227fde86df3308a8da
SHA512 4cc68a9a83a3417fb659df886673fc0f28346a5a7a08cedd54fe1e4ba81069deb033e243b2638fc83ee4d4adeda245dd6fb6bafd98c3050ad850617446b43a1b
SSDEEP 6144:340dRt+g0QPekyswLCwuSr08hKZFXZoMq3+:o07h0igTx9nXMO+
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

106496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

atl

ord58 ord21 ord16 ord15 ord18 ord57 ord32 ord23 ord30

kernel32

DisableThreadLibraryCalls LoadLibraryA GetModuleFileNameA FreeLibrary InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement lstrlenW WideCharToMultiByte MultiByteToWideChar FreeResource LockResource LoadResource SizeofResource FindResourceA GetModuleHandleA lstrlenA CloseHandle MapViewOfFile OpenFileMappingA GetTickCount GetLastError CreateFileMappingA UnmapViewOfFile ReleaseMutex WaitForSingleObject CreateMutexA RtlUnwind GetCommandLineA GetVersion GetCPInfo GetACP GetOEMCP ExitProcess HeapFree HeapAlloc GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue TerminateProcess GetCurrentProcess HeapReAlloc HeapSize SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree WriteFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr SetFilePointer GetProcAddress SetStdHandle FlushFileBuffers LocalFree RaiseException

ole32

CoCreateInstance

oleaut32

LoadRegTypeLi SysStringLen SysAllocString SysAllocStringLen VariantClear SysFreeString

Name

.text

Size

48KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

208KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_6b4b10e0f21a3f0ddb5dda5f6973a275

atl

kernel32

ole32

oleaut32

generic