JaffaCakes118_40c18a1f557f4295b03c4804154e4881

General

Target
JaffaCakes118_40c18a1f557f4295b03c4804154e4881
Size 423KB
Sample250127-scte2stney
SHA256 c6e97f5f26081db3bd02f0f2fce7fecfe3da68f1dd40cedd8c497f1386f87b20
MD5 40c18a1f557f4295b03c4804154e4881
SHA1 45f83247a030522da21f7c5cacaaf7c41b356711
SHA512 002dcf4c0362844c71c8e9f063b471a9b5ac77a0eb1fe65533cac772e7b19a2c435be7e4730e5d1165bd4e9fe583ba21224c3788abb597065bba0dbfef7c9b85
SSDEEP 12288:m5OJEQaQIcpOHOBJuLCVRgNO4brZvuXv08+LkvyD:6xNkJuLCVe7B3DLt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_40c18a1f557f4295b03c4804154e4881

File Explorer

JaffaCakes118_40c18a1f557f4295b03c4804154e4881

.exe 423KB

JaffaCakes118_40c18a1f557f4295b03c4804154e4881

IMPHASH d03672697703b4af22632fd87f4a7f5f
SHA256 c6e97f5f26081db3bd02f0f2fce7fecfe3da68f1dd40cedd8c497f1386f87b20
MD5 40c18a1f557f4295b03c4804154e4881
SHA1 45f83247a030522da21f7c5cacaaf7c41b356711
SHA512 002dcf4c0362844c71c8e9f063b471a9b5ac77a0eb1fe65533cac772e7b19a2c435be7e4730e5d1165bd4e9fe583ba21224c3788abb597065bba0dbfef7c9b85
SSDEEP 12288:m5OJEQaQIcpOHOBJuLCVRgNO4brZvuXv08+LkvyD:6xNkJuLCVe7B3DLt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

179728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary CompareStringW HeapDestroy FillConsoleOutputAttribute RtlUnwind GetModuleHandleW GlobalReAlloc GetCurrentProcess GetFileType VirtualAlloc InitializeCriticalSectionAndSpinCount WriteFile HeapReAlloc GetConsoleOutputCP GetCurrencyFormatW GetConsoleMode EnumSystemLocalesA TlsAlloc GetModuleFileNameA FreeEnvironmentStringsW UnhandledExceptionFilter Sleep GetCPInfo GetLocaleInfoW SetStdHandle LoadLibraryA GetTickCount GetSystemTimeAsFileTime GetLastError EnterCriticalSection GetStringTypeA QueryPerformanceCounter OutputDebugStringA IsValidCodePage TlsFree WriteConsoleW LeaveCriticalSection DeleteCriticalSection HeapAlloc GetDateFormatA HeapFree GetTimeFormatW SetHandleCount GetCurrentProcessId ReadFileEx GetOEMCP SetLastError LCMapStringA GetStdHandle DebugBreak GetCommandLineW GetProcessHeap FlushFileBuffers SetConsoleCtrlHandler WideCharToMultiByte FillConsoleOutputCharacterA CloseHandle SetFilePointer SetEnvironmentVariableA RaiseException MoveFileW WaitForSingleObject WriteConsoleA SetUnhandledExceptionFilter GetProfileIntW CreateFileA GetStartupInfoW GetProcAddress GetConsoleCP GetCurrentThread CompareStringA HeapCreate InterlockedExchange TlsGetValue OutputDebugStringW GetEnvironmentStringsW VirtualQuery LoadLibraryW LCMapStringW SetLocalTime HeapSize GetCurrentThreadId GetTimeFormatA MultiByteToWideChar TerminateProcess GetACP GetTimeZoneInformation GlobalAddAtomA TlsSetValue InterlockedDecrement GetLocaleInfoA GetStartupInfoA IsDebuggerPresent ExitProcess HeapValidate VirtualFree lstrlenA GetModuleHandleA GetModuleFileNameW GlobalGetAtomNameW IsValidLocale InterlockedIncrement IsBadReadPtr GetUserDefaultLCID GetStringTypeW

comdlg32

ReplaceTextW FindTextA

advapi32

CryptHashSessionKey CryptGetKeyParam CreateServiceA LookupPrivilegeValueA RegOpenKeyExW LookupSecurityDescriptorPartsW RegSaveKeyW RegSaveKeyA CryptAcquireContextW RegRestoreKeyA ReportEventW RegSetValueExA CryptSetProviderExA RegQueryValueA CryptSignHashA LookupPrivilegeDisplayNameW LookupPrivilegeDisplayNameA RegRestoreKeyW RegQueryValueW InitiateSystemShutdownW CryptSignHashW CryptGetUserKey

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_40c18a1f557f4295b03c4804154e4881

kernel32

comdlg32

advapi32

generic