JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5
Size 860KB
Sample250119-y7d7hatrb1
SHA256 188245ca88ac8fdb78f3675790553de5b8cfb3234022c882c4d6f98b4accabfd
MD5 d248af12b5a9f5a0f1622b3504caf1b5
SHA1 5d5601e864a8f712cb83de1ae96798fe627b1574
SHA512 cf475fd2b479dd0aa3d68b727dedf4070915212ec79ae230d8d16e0f5cdfc71eac3a7395324e83b8d394133004ac09d9def8c63df5c729e23b40d825f40561ec
SSDEEP 12288:LmVAwSQQYzBqeOYAR0XL1G8wAJm9aLlnXhk+4COLvZhNH4erI92AtHYhJwMxWkEa:l1QBS00tJQ9fg2nH0Jx2RvQN4je3d6R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5

File Explorer

JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5

.exe 860KB

JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5

IMPHASH 1742923cf609730e1ab0e22afbe3e39f
SHA256 188245ca88ac8fdb78f3675790553de5b8cfb3234022c882c4d6f98b4accabfd
MD5 d248af12b5a9f5a0f1622b3504caf1b5
SHA1 5d5601e864a8f712cb83de1ae96798fe627b1574
SHA512 cf475fd2b479dd0aa3d68b727dedf4070915212ec79ae230d8d16e0f5cdfc71eac3a7395324e83b8d394133004ac09d9def8c63df5c729e23b40d825f40561ec
SSDEEP 12288:LmVAwSQQYzBqeOYAR0XL1G8wAJm9aLlnXhk+4COLvZhNH4erI92AtHYhJwMxWkEa:l1QBS00tJQ9fg2nH0Jx2RvQN4je3d6R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

353304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupInstallFileA CM_Detect_Resource_Conflict SetupDiCreateDevRegKeyW pSetupGetFileTitle SetupDiGetDriverInfoDetailW SetupDiSetSelectedDriverA SetupGetTargetPathA SetupPromptForDiskA CM_Get_Device_ID_ListW SetupEnumInfSectionsA SetupDiSetSelectedDriverW CM_Reenumerate_DevNode SetupGetInfFileListW SetupDiCreateDeviceInfoListExW pSetupGuidFromString pSetupModifyGlobalFlags pSetupStringTableGetExtraData SetupDiSetClassRegistryPropertyA SetupQueryInfFileInformationA SetupDiGetClassDescriptionExA SetupCreateDiskSpaceListW CM_Get_Device_ID_ListA CM_Get_Device_Interface_AliasA CM_Get_Log_Conf_Priority CMP_Report_LogOn CM_Create_Range_List CM_Delete_Class_Key_Ex CM_Get_DevNode_Custom_PropertyW SetupInitDefaultQueueCallbackEx SetupGetFileCompressionInfoW CM_Disable_DevNode_Ex pSetupAddMiniIconToList pSetupUnmapAndCloseFile SetupInstallFromInfSectionA CM_Get_Device_Interface_ListA

odbcjt32

SQLPutData OpenDirHook LoadByOrdinal SQLProcedureColumnsW SQLSetScrollOptions InvisibleSelectDb LoginDialogProc InitDialogAgain SQLSetPos SQLMoreResults SQLAllocConnect SQLSetConnectAttrW SQLSpecialColumnsW SQLGetFunctions AdvancedDialogProc SQLFreeHandle SQLRowCount SQLSetCursorNameW SQLSetDescRec DefTxtFmtDlgProc SQLSetEnvAttr SQLExecute SQLGetDiagFieldW SQLGetConnectAttrW SQLGetDescRecW SQLConnectW SQLGetCursorNameW SQLNumParams SQLCopyDesc SQLAllocHandle SQLGetData SQLEndTran SQLGetStmtAttrW RepairCompactProc SQLFetch SQLAllocEnv SQLDescribeColW SQLColumnsW SQLDisconnect SQLNativeSqlW SQLFreeEnv ConfigDSNExW ConfigDSN SQLCancel SQLParamData SQLFreeStmt SQLNumResultCols SQLTablesW SQLProceduresW SQLGetInfoW SQLPrepareW ConfigDialogProc SQLSetDescFieldW ConfigDSNW SQLBulkOperations SQLExtendedFetch InitializeLoginDialog SQLFreeConnect SQLCloseCursor SQLGetTypeInfoW SQLAllocStmt SQLDriverConnectW SQLGetDescFieldW SQLColAttributeW SQLFetchScroll SQLBindParameter SQLSetStmtAttrW SQLExecDirectW SelectUIdxDlgProc

kernel32

GetLocaleInfoA HeapUnlock SetThreadPriorityBoost RemoveDirectoryW DebugBreak SetComputerNameA CommConfigDialogW SetHandleCount LZRead GetOEMCP IsDBCSLeadByte LoadLibraryA FindResourceA LoadModule GetCurrentConsoleFont TerminateJobObject GlobalUnfix VerLanguageNameA VirtualAlloc GetHandleContext GetCommModemStatus GetConsoleCursorInfo GetEnvironmentStringsW QueryPerformanceCounter ReadConsoleOutputW CallNamedPipeA GetFileInformationByHandle GetCalendarInfoA BackupSeek WaitNamedPipeW GetCurrentActCtx _lread GlobalMemoryStatusEx SetVolumeMountPointW ProcessIdToSessionId

iphlpapi

GetTcpStatisticsEx _PfMakeLog@4 _PfAddGlobalFilterToInterface@8 _PfDeleteInterface@4 IpRenewAddress AddIPAddress _PfRebindFilters@8 _PfBindInterfaceToIPAddress@12 NhpAllocateAndGetInterfaceInfoFromStack GetIpStatisticsEx GetUdpStatistics InternalSetIfEntry InternalSetIpNetEntry NotifyRouteChange FlushIpNetTable NhGetInterfaceNameFromGuid InternalGetTcpTable InternalGetIpForwardTable GetIpAddrTable Icmp6CreateFile GetIpNetTable SetIfEntry GetTcpStatistics SetIpForwardEntry GetPerAdapterInfo GetIcmpStatistics CreateIpForwardEntry

comctl32

InitializeFlatSB ImageList_LoadImage ImageList_DrawIndirect LBItemFromPt ImageList_DragShowNolock GetEffectiveClientRect InitCommonControlsEx _TrackMouseEvent InitMUILanguage FlatSB_SetScrollProp CreateStatusWindowA FlatSB_SetScrollInfo ImageList_GetImageRect PropertySheetW CreateStatusWindowW PropertySheet DrawStatusTextA ImageList_Write ImageList_AddMasked DrawStatusTextW ImageList_DrawEx CreatePropertySheetPageW CreateStatusWindow ImageList_GetImageCount ImageList_GetIconSize FlatSB_GetScrollPos ImageList_LoadImageW FlatSB_GetScrollRange ImageList_DragMove GetMUILanguage DllGetVersion ShowHideMenuCtl ImageList_GetDragImage ImageList_SetIconSize ImageList_ReplaceIcon ImageList_Copy CreatePropertySheetPage

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_d248af12b5a9f5a0f1622b3504caf1b5

setupapi

odbcjt32

kernel32

iphlpapi

comctl32

generic