JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f
Size 106KB
Sample250118-nera9asngp
SHA256 215995b8ea677b1906ff24d98a1965ab2a2f4be0f38d4ecbd40c88517fb7372a
MD5 a84fb861cb3f697b9ed903d00dc8851f
SHA1 3d280490f0d53ff20dd6ecef07cc092ce069cd48
SHA512 51639c972e97dbc5735cc23476a31a6676952cc883fa2c1deca0f01f434868eced5e9ce35f680a31d5b81dcf7c3647822408b22e80c880d4d79bbadf2a850330
SSDEEP 1536:u+FDoKvniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZVA:u+FDZK71QkbstyJjCKICpC72s/mlaXu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f

File Explorer

JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f

.exe 106KB

JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f

IMPHASH ddbb90ebf41500dde8a2155d2d44be6d
SHA256 215995b8ea677b1906ff24d98a1965ab2a2f4be0f38d4ecbd40c88517fb7372a
MD5 a84fb861cb3f697b9ed903d00dc8851f
SHA1 3d280490f0d53ff20dd6ecef07cc092ce069cd48
SHA512 51639c972e97dbc5735cc23476a31a6676952cc883fa2c1deca0f01f434868eced5e9ce35f680a31d5b81dcf7c3647822408b22e80c880d4d79bbadf2a850330
SSDEEP 1536:u+FDoKvniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZVA:u+FDZK71QkbstyJjCKICpC72s/mlaXu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4540

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantChangeTypeEx SysStringLen SysAllocStringLen VariantCopyInd VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegCloseKey OpenProcessToken RegOpenKeyExA LookupPrivilegeValueA

kernel32

SetCommConfig CreateFileA CloseHandle FindResourceA Sleep DeleteFileA VirtualFree SetFilePointer SetErrorMode GetSystemInfo RemoveDirectoryA ReadFile GetUserDefaultLangID OutputDebugStringA GetEnvironmentVariableA GetWindowsDirectoryA GetLocaleInfoA LoadLibraryA GetACP LockResource GetFileSize FormatMessageA FlushViewOfFile GetExitCodeProcess GetFullPathNameA GetLastError GetSystemDefaultLCID SetEndOfFile GetFileAttributesA LoadResource VirtualQuery GetCurrentProcess SizeofResource GetProcAddress GetVersionExA GetModuleHandleA GetCommandLineA GetModuleFileNameA IsDBCSLeadByte CreateProcessA VirtualProtect CreateDirectoryA VirtualAlloc InterlockedExchange WriteFile ReadFile GetCommandLineA GetModuleHandleA GetLastError GetStdHandle CreateFileA GetFileSize ExitProcess WideCharToMultiByte LocalAlloc TlsSetValue VirtualAlloc LocalFree WriteFile LeaveCriticalSection GetFileType SetEndOfFile TlsGetValue SetFilePointer CloseHandle VirtualFree MultiByteToWideChar GetSystemTime RaiseException EnterCriticalSection DeleteCriticalSection

user32

MessageBoxA SetWindowLongA CharPrevA ExitWindowsEx TranslateMessage MsgWaitForMultipleObjects LoadStringA CallWindowProcA DestroyWindow CreateWindowExA PeekMessageA DispatchMessageA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a84fb861cb3f697b9ed903d00dc8851f

oleaut32

version

advapi32

kernel32

user32

generic