JaffaCakes118_3eaad1092176c93967e82ca25d327951

General

Target
JaffaCakes118_3eaad1092176c93967e82ca25d327951
Size 484KB
Sample260102-ldw41aem6x
SHA256 27c936686f3330bc4d6cd52dbe5cae90da5bb88a9883313afce91a908752bf4b
MD5 3eaad1092176c93967e82ca25d327951
SHA1 9c2ef11271a88f41a62d230c565412e9c2f3eac7
SHA512 bde2c41405101048b352e566cef608d14f497d790ffc7520a28474f79707231a95b2b749579ded5dc8680726d8b1afeb1f761e90167a993a9ae5ab34525214f5
SSDEEP 6144:hbqzVbbUYjG8AClk8+n05KhoSiMsJZuSsnDxeHakVqhhmaM+5Vg0nKH5PnFyunZY:BqxgYjG8ACv+0KhpsJZRXH52LMcg5nO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3eaad1092176c93967e82ca25d327951

File Explorer

JaffaCakes118_3eaad1092176c93967e82ca25d327951

.dll 484KB

JaffaCakes118_3eaad1092176c93967e82ca25d327951

IMPHASH 55e63e10220d9780afbfa2f458c9d3dc
SHA256 27c936686f3330bc4d6cd52dbe5cae90da5bb88a9883313afce91a908752bf4b
MD5 3eaad1092176c93967e82ca25d327951
SHA1 9c2ef11271a88f41a62d230c565412e9c2f3eac7
SHA512 bde2c41405101048b352e566cef608d14f497d790ffc7520a28474f79707231a95b2b749579ded5dc8680726d8b1afeb1f761e90167a993a9ae5ab34525214f5
SSDEEP 6144:hbqzVbbUYjG8AClk8+n05KhoSiMsJZuSsnDxeHakVqhhmaM+5Vg0nKH5PnFyunZY:BqxgYjG8ACv+0KhpsJZRXH52LMcg5nO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\chart-Green\Vowel-list\Place\935\Day.pdb

kernel32

GetEnvironmentVariableW FindFirstChangeNotificationW FreeLibrary HeapAlloc WaitForSingleObject SetEvent GetTickCount GetProcessHeap GetSystemDirectoryW LoadLibraryW Sleep GetProcAddress VirtualProtectEx GetWindowsDirectoryW LCMapStringW LCMapStringA GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc WriteFile HeapSize LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW

netapi32

NetApiBufferFree NetWkstaSetInfo NetGetAnyDCName NetUserGetInfo

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_3eaad1092176c93967e82ca25d327951

kernel32

netapi32

generic