JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae
Size 257KB
Sample250119-dwv1natmat
SHA256 25a2ae8127f9b894614e69a7c6268eca524638647e03ab2b1383f211a3db6710
MD5 bbf3aa1b145ee62d73ce5812db6ff5ae
SHA1 043b45d6222a4f4c2350ce44014db0b1122c7451
SHA512 6a5d407c3e6ceff4dea55c135e17c48a05012ec1c3e4f70f723cf41e421c45b3cd7e982e1782255c38fd2cf53dc4d662207949498fb4bae53e2221e5256f2b0d
SSDEEP 6144:+dZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:OkODuHyseYW2IzT4R3ht7Mx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

File Explorer

JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

.exe 257KB

JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

IMPHASH 9226372961b736e140670af607ea1b7c
SHA256 25a2ae8127f9b894614e69a7c6268eca524638647e03ab2b1383f211a3db6710
MD5 bbf3aa1b145ee62d73ce5812db6ff5ae
SHA1 043b45d6222a4f4c2350ce44014db0b1122c7451
SHA512 6a5d407c3e6ceff4dea55c135e17c48a05012ec1c3e4f70f723cf41e421c45b3cd7e982e1782255c38fd2cf53dc4d662207949498fb4bae53e2221e5256f2b0d
SSDEEP 6144:+dZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:OkODuHyseYW2IzT4R3ht7Mx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetLocalTime GetModuleFileNameA GetModuleFileNameW GetModuleHandleA ExitProcess GetSystemDirectoryW GetLongPathNameW GetCurrentThreadId GetVersionExA GetProcessHeap GetLastError TlsAlloc GetCurrentThread FileTimeToSystemTime FileTimeToLocalFileTime Sleep GetEnvironmentVariableA HeapCreate GetStartupInfoA GetCPInfo GetACP GetOEMCP IsValidCodePage GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent FreeLibrary LoadLibraryA InitializeCriticalSection MultiByteToWideChar GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetStringTypeW LoadLibraryW GetLocaleInfoA GetLocaleInfoW GetUserDefaultLCID IsValidLocale GetTimeFormatA GetDateFormatA Beep GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA GetFullPathNameA CreateDirectoryA RemoveDirectoryA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW CreateDirectoryW MoveFileW RemoveDirectoryW MoveFileA RaiseException GetExitCodeProcess WaitForSingleObject GetSystemInfo DuplicateHandle CreatePipe SystemTimeToFileTime BeginUpdateResourceW GetProcAddress

security

SealMessage CompleteAuthToken

user32

EnableWindow CopyIcon SetWindowLongW CreateDialogIndirectParamA LoadMenuW DestroyCursor TrackPopupMenuEx RegisterWindowMessageA GetMenuStringW wsprintfW CreateWindowExA FindWindowW GetMenuStringA SetActiveWindow IsWindow GetMenuItemInfoA SetFocus OffsetRect RegisterClassExA WaitForInputIdle

gdi32

RemoveFontResourceExW CreateColorSpaceW GetTextExtentPointW CreateScalableFontResourceW CreateFontIndirectA CreateFontW CreateFontIndirectW

Name

.text

Size

14KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

229KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aGH

Size

92KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pOIs

Size

2KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.XFP

Size

1KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Cvhg

Size

122KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

kernel32

security

user32

gdi32

generic