JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc

General

Target
JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc
Size 429KB
Sample250624-wl91yaxtay
SHA256 0774af6d37a69def844303e997b10a4eac4b5be9b57717839d26dca221ee07a3
MD5 15ccb97c3f039efdd6242bedca5198dc
SHA1 035832169224a38b84059958545c39d4ec27cbf6
SHA512 510151416f2b6420527c35af4a09beac1688e483570a6b296e2267601d42de31e2050a3de2cc9ef26bb3a71075edd806c9d8a92d50348d6b7c9e2728c82281e9
SSDEEP 12288:dCQXHfmzl5O43PLKOWVaLuox94QsbcG0CZge:lOrO2PLKlVFox94QswTCee
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc

File Explorer

JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc

.dll 429KB

JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc

IMPHASH 5d02bb9eaf349ef82aebf45925117831
SHA256 0774af6d37a69def844303e997b10a4eac4b5be9b57717839d26dca221ee07a3
MD5 15ccb97c3f039efdd6242bedca5198dc
SHA1 035832169224a38b84059958545c39d4ec27cbf6
SHA512 510151416f2b6420527c35af4a09beac1688e483570a6b296e2267601d42de31e2050a3de2cc9ef26bb3a71075edd806c9d8a92d50348d6b7c9e2728c82281e9
SSDEEP 12288:dCQXHfmzl5O43PLKOWVaLuox94QsbcG0CZge:lOrO2PLKlVFox94QswTCee
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

110892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

FindNextFileA FindFirstFileA CreateFileA GetTickCount CreatePipe GetProcessHeap LoadLibraryA GetProcAddress ExitProcess CreateFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList RtlPcToFileHeader RaiseException GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte HeapAlloc HeapFree FindClose FindFirstFileExA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_15ccb97c3f039efdd6242bedca5198dc

kernel32

generic