JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21
Size 185KB
Sample250120-mk8xtavnbj
SHA256 4f44e138132a99385a0c26381412a06736d62be736cdbc062fe4dc4c6e3a847b
MD5 e47a0ac0a078d39c328722e1bb379c21
SHA1 8f3ebf1174136f75634b2e9b5a1728842d064390
SHA512 957161bb72ccbba8aa9250139c3b5e3e3a03c987055c991f15b616cbefc3d09c624361fb63f894cf84fad884049e3988ffa8c1921b0ef23c07151bbb9fe9e90c
SSDEEP 3072:pLNmKrY2wW7KultckLEael5a00ciGS6725W8ZRfCdzvFVK6/U8WRG5OXc:x1rN37KYtc1Nl5aYMi20SCNvn/iRAO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21

File Explorer

JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21

.exe 185KB

JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21

IMPHASH 710af98167fc3c9fdafb160e83217262
SHA256 4f44e138132a99385a0c26381412a06736d62be736cdbc062fe4dc4c6e3a847b
MD5 e47a0ac0a078d39c328722e1bb379c21
SHA1 8f3ebf1174136f75634b2e9b5a1728842d064390
SHA512 957161bb72ccbba8aa9250139c3b5e3e3a03c987055c991f15b616cbefc3d09c624361fb63f894cf84fad884049e3988ffa8c1921b0ef23c07151bbb9fe9e90c
SSDEEP 3072:pLNmKrY2wW7KultckLEael5a00ciGS6725W8ZRfCdzvFVK6/U8WRG5OXc:x1rN37KYtc1Nl5aYMi20SCNvn/iRAO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

StgCreateDocfileOnILockBytes CoGetClassObject OleFlushClipboard StgOpenStorageOnILockBytes CreateILockBytesOnHGlobal CoTaskMemAlloc CoTaskMemFree CoRegisterMessageFilter OleIsCurrentClipboard CoInitialize CoFreeUnusedLibraries CoRevokeClassObject CoUninitialize CLSIDFromProgID OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

gdi32

GetMapMode PtVisible TextOutW ExtSelectClipRgn RectVisible SelectObject ExtTextOutW ScaleViewportExtEx SetViewportOrgEx DeleteDC Escape GetDeviceCaps SetWindowExtEx GetBkColor GetStockObject OffsetViewportOrgEx ScaleWindowExtEx GetTextColor GetRgnBox

shell32

SHCreateDirectoryExW SHGetSpecialFolderPathW

advapi32

RegEnumKeyExW RegCreateKeyExW RegQueryValueW RegDeleteKeyW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryInfoKeyW RegEnumKeyW RegOpenKeyW RegQueryValueExW

kernel32

InterlockedDecrement SetFileTime GetCalendarInfoW FindFirstFileW GetFileAttributesW CreateFileW lstrcpyW SetFilePointer GetThreadContext GetCurrentDirectoryW WideCharToMultiByte FindClose RemoveDirectoryW LoadLibraryW GetVersion MultiByteToWideChar GetSystemDefaultLangID GetModuleFileNameW SystemTimeToFileTime EnumResourceNamesA DeleteFileW EnumResourceLanguagesW ExitProcess GetCurrentProcessId CreateDirectoryW ReadFile FindNextFileW LocalFileTimeToFileTime WriteFile GetLocaleInfoW ConvertDefaultLocale MoveFileW GetProcAddress

shlwapi

PathFileExistsW PathStripToRootW PathRemoveFileSpecW PathIsUNCW PathFindExtensionW PathFindFileNameW PathAppendW

oleacc

LresultFromObject CreateStdAccessibleObject

user32

SetPropW RemovePropW GetNextDlgTabItem CopyAcceleratorTableW GetClassLongW CreateWindowExW SendDlgItemMessageA InvalidateRect CharUpperW CharNextW RegisterWindowMessageW GetNextDlgGroupItem GetPropW WinHelpW IsRectEmpty GetClassInfoExW InvalidateRgn SetRect MessageBeep DestroyMenu

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_e47a0ac0a078d39c328722e1bb379c21

ole32

gdi32

shell32

advapi32

kernel32

shlwapi

oleacc

user32

generic