JaffaCakes118_892950032a1be5aa425a649450ea946e

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_892950032a1be5aa425a649450ea946e
Size 476KB
Sample250108-d7fecavlcj
SHA256 8acaf014d3d6443f4dd5ed4abfe2b8ab45b6e500b31706cf88f3897865a0ed1b
MD5 892950032a1be5aa425a649450ea946e
SHA1 8f40032e608c029092fada5c944a9eab35d051fc
SHA512 ac4177929f22e89c3c52a47a2eddef71d6c293e43f00881e41ef5baefe1279daca3d8210ea8eb294b2c04bd3fa25d94e0d8ffd539a90f63c9496d4a9d28fad3b
SSDEEP 12288:9YmIjE7eNdKcWEbk2Ubr4TgyUbZm6qCs8e/G:X7eNAYbk2Ub8T5geL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_892950032a1be5aa425a649450ea946e

File Explorer

JaffaCakes118_892950032a1be5aa425a649450ea946e

.exe 476KB

JaffaCakes118_892950032a1be5aa425a649450ea946e

IMPHASH 085b8a5d9e723b8ba9982a936ce1c779
SHA256 8acaf014d3d6443f4dd5ed4abfe2b8ab45b6e500b31706cf88f3897865a0ed1b
MD5 892950032a1be5aa425a649450ea946e
SHA1 8f40032e608c029092fada5c944a9eab35d051fc
SHA512 ac4177929f22e89c3c52a47a2eddef71d6c293e43f00881e41ef5baefe1279daca3d8210ea8eb294b2c04bd3fa25d94e0d8ffd539a90f63c9496d4a9d28fad3b
SSDEEP 12288:9YmIjE7eNdKcWEbk2Ubr4TgyUbZm6qCs8e/G:X7eNAYbk2Ub8T5geL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Perforce\FRMain\code\build\win\results\Release\info\arh.pdb

kernel32

WideCharToMultiByte CreateFileA HeapAlloc GetProcessHeap HeapFree CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessW LocalFree MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WriteFile SetFilePointer WriteConsoleW GetFileType GetStdHandle GetModuleFileNameW GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStartupInfoA Sleep GetModuleHandleW GetProcAddress ExitProcess LoadLibraryW RaiseException GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA RtlUnwind WriteConsoleA GetConsoleOutputCP SetStdHandle GetStringTypeA GetStringTypeW GetLocaleInfoA

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

msi

ord141 ord90 ord205 ord173 ord16

shlwapi

PathAppendW PathRemoveFileSpecW StrDupW StrChrA PathAppendA

advapi32

CryptAcquireContextW CryptDestroyHash RegOpenKeyExW RegQueryValueExW RegCloseKey CryptReleaseContext CryptCreateHash CryptHashData CryptGetHashParam

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_892950032a1be5aa425a649450ea946e

kernel32

version

msi

shlwapi

advapi32

generic