JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7

General

Target
JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7
Size 849KB
Sample250121-tk6wsasmbm
SHA256 497bfea9cdbf558f962df7a6a79cb154d8771abe12d194e16b0fb39399d4113d
MD5 05cc10cfdaf834cb68755f0c9c12ccc7
SHA1 3f607f019df42ff01c39a0674ecbb77b53fbe9d9
SHA512 112b848f119525c4c0c1eb6410594a3dc86bb9eff34ec2d9c585c9e25accf917586b2c3dd749dbc467382c1a9f1e5088be849740cdd1c0388335cd06d8ebe987
SSDEEP 24576:0yvVorCrFi6R8fF7PV4lt6Khta50sg5ViW:pQ6R8fZWt6Mck
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7

File Explorer

JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7

.exe 849KB

JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7

IMPHASH 52ccbc6f688779cb8cacc7a1e42d4e3a
SHA256 497bfea9cdbf558f962df7a6a79cb154d8771abe12d194e16b0fb39399d4113d
MD5 05cc10cfdaf834cb68755f0c9c12ccc7
SHA1 3f607f019df42ff01c39a0674ecbb77b53fbe9d9
SHA512 112b848f119525c4c0c1eb6410594a3dc86bb9eff34ec2d9c585c9e25accf917586b2c3dd749dbc467382c1a9f1e5088be849740cdd1c0388335cd06d8ebe987
SSDEEP 24576:0yvVorCrFi6R8fF7PV4lt6Khta50sg5ViW:pQ6R8fZWt6Mck
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

282884

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

LookupPrivilegeValueA RegQueryInfoKeyA LsaQueryTrustedDomainInfo RegisterServiceCtrlHandlerExA LookupSecurityDescriptorPartsA AccessCheckByTypeResultListAndAuditAlarmW A_SHAInit UpdateTraceA IsTextUnicode MD5Final ElfReportEventW SetPrivateObjectSecurityEx RegEnumKeyExA RegSaveKeyW GetSidSubAuthority SetEntriesInAccessListW GetInheritanceSourceW GetSidIdentifierAuthority CloseCodeAuthzLevel IsTokenUntrusted GetMultipleTrusteeOperationW

kernel32

SetThreadIdealProcessor CreateHardLinkA NlsGetCacheUpdateCount IsValidCodePage GetCPInfo GetConsoleAliasA CreateWaitableTimerW GetTempFileNameW GetStringTypeExW GetVolumePathNamesForVolumeNameW PeekConsoleInputA SetConsoleNlsMode GetVersionExW GetCurrentThreadId GlobalAddAtomA LocalAlloc PostQueuedCompletionStatus VirtualAlloc GetSystemWindowsDirectoryW SetHandleCount SetThreadPriority DeleteTimerQueue BuildCommDCBAndTimeoutsW InitializeCriticalSection LoadLibraryA

itss

DllMain

oleaut32

VarBoolFromI4 SafeArrayPutElement VarBstrFromUI1 VarXor VarDecFromBool VarI2FromUI4 VarUI2FromBool VarI1FromR4 VarParseNumFromStr VarUI4FromR8 VarDecFromUI1 VarEqv VarFormatDateTime VarUI2FromDate SafeArrayCreateEx VarI4FromR8 VarDecDiv SysAllocString VariantClear VarUI1FromI2 VarDecFromI4

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_05cc10cfdaf834cb68755f0c9c12ccc7

advapi32

kernel32

itss

oleaut32

generic