JaffaCakes118_438955525d3f7712570ab37641915bcc

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_438955525d3f7712570ab37641915bcc
Size 78KB
Sample250127-zkncbsvmax
SHA256 de19678737ca10a9a57ea6074c0b7a819c2a170850062d85dcf9dad6cc668ade
MD5 438955525d3f7712570ab37641915bcc
SHA1 dd2d9b69314a2cb8a6b0ade91ec122eeb33fc744
SHA512 02189341413890d450c9347795229b998621a3668ac692ee579e265431f391c3a976451cec986f8fa6aa1b7ebe38864120543ec020bb4116f254d25bd4e15a95
SSDEEP 1536:HD9kNuNMSkRDlALvBYzQn1fskKWIo1K85XAcXoXicXoXeV:j94IklALJf0WIo1K85XAc4Sc4OV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_438955525d3f7712570ab37641915bcc

File Explorer

JaffaCakes118_438955525d3f7712570ab37641915bcc

.exe 78KB

JaffaCakes118_438955525d3f7712570ab37641915bcc

IMPHASH d7ca187f7d4e7d8fd8e0d373d0312f3e
SHA256 de19678737ca10a9a57ea6074c0b7a819c2a170850062d85dcf9dad6cc668ade
MD5 438955525d3f7712570ab37641915bcc
SHA1 dd2d9b69314a2cb8a6b0ade91ec122eeb33fc744
SHA512 02189341413890d450c9347795229b998621a3668ac692ee579e265431f391c3a976451cec986f8fa6aa1b7ebe38864120543ec020bb4116f254d25bd4e15a95
SSDEEP 1536:HD9kNuNMSkRDlALvBYzQn1fskKWIo1K85XAcXoXicXoXeV:j94IklALJf0WIo1K85XAc4Sc4OV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\bofang_setup\vs2008\home_ie\Release\ShellLink.pdb

kernel32

GetTempPathW GetTempFileNameW CopyFileW OpenProcess FindNextFileW CreateProcessW DeleteFileW FindFirstFileW CreateFileW GetModuleFileNameW WaitForSingleObject GetCurrentProcessId CloseHandle FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetSystemTimeAsFileTime GetModuleHandleW Sleep GetProcAddress ExitProcess GetStartupInfoW GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc LCMapStringW WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize SetFilePointer GetConsoleCP GetConsoleMode

user32

wsprintfW

advapi32

RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegSetValueExW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoUninitialize CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_438955525d3f7712570ab37641915bcc

kernel32

user32

advapi32

shell32

ole32

generic