JaffaCakes118_10766ab6037bf0f882f427917a9b3679

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_10766ab6037bf0f882f427917a9b3679
Size 378KB
Sample250610-g4vxeahj7x
SHA256 641c756c30d0c000f81bfc293e971299cd191ce2148a5da8f8ed5ef4ac6d8995
MD5 10766ab6037bf0f882f427917a9b3679
SHA1 2345dc32f9954a925e02cbc20b7d775cefb9927e
SHA512 949e5ef4912d93a2baa7d3ae4e9f3fca610136dce4ea52e86ce192b46e6893c69e1befa40176cf5db5ff2041cdf99edc050ca7f4ebdd9c99117bd7e11194c37e
SSDEEP 6144:4BVb3xVUfgQloq4xJILh8m/MLAYs6nkLHOqXLhWVMAkyv0mDgQ8HUKQMXDJC:47kF94xJyh3/MLxrnEXFWVMAkE0rp0Kv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_10766ab6037bf0f882f427917a9b3679

File Explorer

JaffaCakes118_10766ab6037bf0f882f427917a9b3679

.dll 378KB

JaffaCakes118_10766ab6037bf0f882f427917a9b3679

IMPHASH 9f13d8dd4f9d63b3e95879ef0b618f95
SHA256 641c756c30d0c000f81bfc293e971299cd191ce2148a5da8f8ed5ef4ac6d8995
MD5 10766ab6037bf0f882f427917a9b3679
SHA1 2345dc32f9954a925e02cbc20b7d775cefb9927e
SHA512 949e5ef4912d93a2baa7d3ae4e9f3fca610136dce4ea52e86ce192b46e6893c69e1befa40176cf5db5ff2041cdf99edc050ca7f4ebdd9c99117bd7e11194c37e
SSDEEP 6144:4BVb3xVUfgQloq4xJILh8m/MLAYs6nkLHOqXLhWVMAkyv0mDgQ8HUKQMXDJC:47kF94xJyh3/MLxrnEXFWVMAkE0rp0Kv
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

275349

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\540\27\972\Eight\reme\Wing b\board.pdb

kernel32

GetProcessHeap HeapSize GetFileType GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP HeapReAlloc IsValidCodePage GetOEMCP LoadLibraryExW OutputDebugStringW GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers SetStdHandle WriteConsoleW CloseHandle CreateFileW GetSystemTime GetTempPathA TlsAlloc GetVersionExA VirtualProtect GetModuleHandleA GetModuleFileNameA LockResource CreateFileA GetSystemDirectoryA GetVolumeInformationA OpenProcess TlsSetValue GetDateFormatA GetWindowsDirectoryA QueryPerformanceCounter FindResourceA GetModuleFileNameW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW HeapAlloc GetCommandLineA GetCurrentThreadId RaiseException RtlUnwind GetLastError HeapFree IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsGetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress GetCPInfo LCMapStringW IsDebuggerPresent ExitProcess GetModuleHandleExW GetStdHandle WriteFile

user32

EnumWindows RegisterHotKey LoadImageA GetClassNameA DispatchMessageA CallNextHookEx IsWindowEnabled DrawIcon GetClassInfoExA CheckMenuRadioItem GetWindowLongA CreateWindowExA ReleaseDC DefWindowProcW

ole32

OleSetContainedObject OleInitialize OleUninitialize

secur32

FreeContextBuffer ImpersonateSecurityContext InitializeSecurityContextA AcquireCredentialsHandleA FreeCredentialsHandle AcceptSecurityContext

clusapi

GetClusterNotify GetClusterResourceState MoveClusterGroup SetClusterNetworkName SetClusterNetworkPriorityOrder RemoveClusterResourceDependency SetClusterGroupName OfflineClusterGroup SetClusterResourceName SetClusterQuorumResource OnlineClusterGroup OpenClusterGroup PauseClusterNode RemoveClusterResourceNode GetClusterFromNode OpenClusterNode GetClusterInformation GetClusterNetInterface GetClusterNodeState OnlineClusterResource RestoreClusterDatabase RegisterClusterNotify GetClusterResourceTypeKey GetClusterFromResource ResumeClusterNode GetClusterNodeId GetClusterGroupState GetNodeClusterState GetClusterNetworkKey OpenClusterResource GetClusterResourceKey OpenClusterNetwork GetClusterFromNetwork GetClusterGroupKey OpenCluster GetClusterQuorumResource GetClusterNetInterfaceKey GetClusterNodeKey GetClusterResourceNetworkName GetClusterNetInterfaceState SetClusterServiceAccountPassword GetClusterNetworkState OfflineClusterResource SetClusterName SetClusterGroupNodeList GetClusterNetworkId OpenClusterNetInterface GetClusterKey

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_10766ab6037bf0f882f427917a9b3679

kernel32

user32

ole32

secur32

clusapi

generic