JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d

General

Target
JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d
Size 775KB
Sample250106-mscvcawrdp
SHA256 cef68aa75710c3a28b46d5fceb8ff05718bf7f994cbc49cf5ab16c06e69a54bf
MD5 1ee4dbdd3590335ffaa92c131911705d
SHA1 093c3979d72cabd3409424c07fb0ed8e4e32f5ce
SHA512 f263f35a7c02ac2997c2d611038328031aed1bea24c15f0f9a91859d6359de715817f770f6d5da4a619b097f2256a5c8259d95c33bb3daed0459f94356b4b4e1
SSDEEP 12288:txmGsdY0LoOaHwKeoE4LdPc/u+mVC2Blvt8Y8fAnnac6b0Ihh+y:txEpL6TFFifAnnOb7h+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d

File Explorer

JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d

.exe 775KB

JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d

IMPHASH d86b72152e3eb79509e879927a109d7c
SHA256 cef68aa75710c3a28b46d5fceb8ff05718bf7f994cbc49cf5ab16c06e69a54bf
MD5 1ee4dbdd3590335ffaa92c131911705d
SHA1 093c3979d72cabd3409424c07fb0ed8e4e32f5ce
SHA512 f263f35a7c02ac2997c2d611038328031aed1bea24c15f0f9a91859d6359de715817f770f6d5da4a619b097f2256a5c8259d95c33bb3daed0459f94356b4b4e1
SSDEEP 12288:txmGsdY0LoOaHwKeoE4LdPc/u+mVC2Blvt8Y8fAnnac6b0Ihh+y:txEpL6TFFifAnnOb7h+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28621

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetSystemInfo GetModuleHandleW FindResourceW GetConsoleWindow CreateFileW HeapSize GetProcessHeap WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

user32

ShowWindow

Name

.text

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.zqHWbqh

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

564KB

Virtual Size

563KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_1ee4dbdd3590335ffaa92c131911705d

kernel32

user32

generic