JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf

General

Target
JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf
Size 76KB
Sample250127-ygq4datmhm
SHA256 f6693b5bd3f690db19d9f4d545c5d6ab62f96dab89b8acef6baf3823f2a8d84c
MD5 4315df4008dc3e0ad431926e0baa34cf
SHA1 adbc65336108a0a96bbde32de9bdf5143289cfec
SHA512 1348d711787ea71744ece62c06c9c1203af85c0f904cff35bac9f0f4feae2d29442076f02bf78baf8f72f3039fe924e04db8450af2b27fd2002f97d18b141025
SSDEEP 1536:9XW30bbCyhLrtpeyHSirUuE8WMFtOXdMhb8jdL88T2bV21PI15KtzHkh:EGN9rOyHSluE8YihbydxYjOtz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf

File Explorer

JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf

.exe 76KB

JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf

IMPHASH 252a3de55d02be596f0be467eeae1cd1
SHA256 f6693b5bd3f690db19d9f4d545c5d6ab62f96dab89b8acef6baf3823f2a8d84c
MD5 4315df4008dc3e0ad431926e0baa34cf
SHA1 adbc65336108a0a96bbde32de9bdf5143289cfec
SHA512 1348d711787ea71744ece62c06c9c1203af85c0f904cff35bac9f0f4feae2d29442076f02bf78baf8f72f3039fe924e04db8450af2b27fd2002f97d18b141025
SSDEEP 1536:9XW30bbCyhLrtpeyHSirUuE8WMFtOXdMhb8jdL88T2bV21PI15KtzHkh:EGN9rOyHSluE8YihbydxYjOtz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5139

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA GetLastError FindResourceExA GetProfileStringW RtlMoveMemory HeapAlloc VerLanguageNameA SetEndOfFile TlsFree GetModuleHandleW VirtualAlloc VirtualAllocEx InterlockedCompareExchange GetPrivateProfileIntW SystemTimeToFileTime CompareStringA GetModuleHandleA VirtualFree ClearCommError ExitProcess GetBinaryTypeA LoadLibraryA GetCurrentDirectoryA RemoveDirectoryW IsBadHugeWritePtr GetFileType WriteProcessMemory CloseHandle

msvcrt

_futime64 wcstok is_wctype _ismbcprint _CIcos ?set_unexpected@@YAP6AXXZP6AXXZ@Z memset memcpy __CxxFrameHandler iscntrl __getmainargs _cgets _stat sin wcscpy _sleep

gdi32

SetBkMode DeleteDC GetPaletteEntries GetNearestPaletteIndex GetTextMetricsW CreateFontIndirectW

user32

DrawTextW GetMenuState EnumDesktopWindows GetWindowLongW EnumChildWindows LoadAcceleratorsA GetKeyState DrawMenuBar DefWindowProcW GetClassNameW SetCursor IsDialogMessageW RegisterClassExW

winmm

waveOutSetPitch mmTaskCreate waveOutOpen mciFreeCommandResource mmioAscend timeBeginPeriod midiInOpen midiStreamClose mixerOpen midiInAddBuffer waveOutBreakLoop waveOutGetPlaybackRate mmioRenameA midiDisconnect DefDriverProc midiStreamPosition midiStreamOpen

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_4315df4008dc3e0ad431926e0baa34cf

kernel32

msvcrt

gdi32

user32

winmm

generic