JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb
Size 211KB
Sample250115-zzdfnsvmcy
SHA256 2739b7020e77dc33431a224e2722ad0a95fc9a77bf96e1855fc86d17f1f55ce7
MD5 62008047a46ce22d4e0b1c5d7eda6acb
SHA1 3bd9f47a4a0163ea45d3bb586f0ff1f983af7f30
SHA512 17844be03b8dd45d428cdb85e8888232fe5745ac7156b0f28ed421449348d30a960db4fec1353ebcc6b5c7f57f3c468a2b75edb8cc5eedfa62a9339da2257828
SSDEEP 3072:9GwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:9G/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb

File Explorer

JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb

.exe 211KB

JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb

IMPHASH 728b5168c443fc8cea3c0c483ddbb8ff
SHA256 2739b7020e77dc33431a224e2722ad0a95fc9a77bf96e1855fc86d17f1f55ce7
MD5 62008047a46ce22d4e0b1c5d7eda6acb
SHA1 3bd9f47a4a0163ea45d3bb586f0ff1f983af7f30
SHA512 17844be03b8dd45d428cdb85e8888232fe5745ac7156b0f28ed421449348d30a960db4fec1353ebcc6b5c7f57f3c468a2b75edb8cc5eedfa62a9339da2257828
SSDEEP 3072:9GwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:9G/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDrives GetProcAddress GetCurrentThread WaitForMultipleObjects GlobalAlloc OpenMutexA InitializeCriticalSection AddAtomA CompareStringA CopyFileA IsValidLocale lstrcpynA OpenEventW GetModuleHandleA GetStartupInfoA GetSystemDefaultLCID GetACP GetCalendarInfoW OpenWaitableTimerA Sleep GetSystemDefaultLangID CreateSemaphoreW ExpandEnvironmentStringsW lstrlenA GetDateFormatA CreateMailslotW SystemTimeToFileTime BeginUpdateResourceA GetExpandedNameW SearchPathA DosDateTimeToFileTime GetWindowsDirectoryW GetEnvironmentStringsW GetStringTypeA QueryPerformanceCounter

user32

GetDlgItemTextW DialogBoxParamA LoadMenuIndirectW GetCapture GetClassInfoW IsIconic LoadBitmapA GetDC PeekMessageW GetMenuState SetWindowTextW GetWindowRect UpdateWindow GetForegroundWindow DialogBoxIndirectParamA ShowWindow EnumClipboardFormats AdjustWindowRect SetCursorPos ReleaseDC InsertMenuA CreateWindowExA ActivateKeyboardLayout LoadIconW DrawTextA DialogBoxIndirectParamW

gdi32

FillPath UnrealizeObject SetDIBits CreateScalableFontResourceW GetTextFaceA CreateFontW SelectClipRgn AnimatePalette

advapi32

RegOpenKeyExA RegOpenKeyW RegDeleteKeyA RegOpenKeyW

shlwapi

SHRegGetBoolUSValueW PathIsUNCServerShareA PathRemoveExtensionA PathGetDriveNumberW IntlStrEqWorkerA PathMakePrettyA StrCmpNIW UrlCombineW

comctl32

DrawStatusText CreateMappedBitmap ImageList_Write

inetcomm

MimeOleGenerateCID MimeOleSetBodyPropW EssKeyExchPreferenceDecodeEx CreateSMTPTransport MimeOleSMimeCapInit MimeOleSMimeCapGetHashAlg MimeEditIsSafeToRun MimeOleParseMhtmlUrl EssSecurityLabelEncodeEx MimeOleGetRelatedSection MimeOleGetFileInfoW EssReceiptRequestEncodeEx MimeOleCreateSecurity MimeOleFileTimeToInetDate MimeOleSMimeCapGetEncAlg MimeOleGetInternat MimeOleSMimeCapAddCert EssSignCertificateDecodeEx

oledlg

OleUIObjectPropertiesW OleUIConvertW OleUIPasteSpecialW OleUIConvertA OleUIPromptUserA OleUIAddVerbMenuW OleUIEditLinksA OleUIPasteSpecialA

Name

.qYS

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.jvNc

Size

2KB

Virtual Size

405KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bCq

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gMFODl

Size

3KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

109KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ifpDc

Size

3KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Ox

Size

2KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_62008047a46ce22d4e0b1c5d7eda6acb

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

inetcomm

oledlg

generic