jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118
Size 225KB
Sample260915-vb22xayte1
SHA256 98799ef930c1987b97321d1759eca78625741979896888a546ab338690093e0b
MD5 e702962387fe4e66af5bc2531a96e07d
SHA1 24bf6d15c162122491534bd04ae3c45d474892d2
SHA512 c92f824e02aedc1a7ec8920b9222d3b1a0f1f43fd662d53ac499657bc5b28af53c2b897d8d6b740516ef7bd7a27db3a069105f4ee5252c73323f458f8eca0dbd
SSDEEP 6144:35gLQbhytZsxEPWupfrCuGmJiF91uOlsna:35gLQbCZsxEPW4fwWCD4a
TLSH
T15D3401553790C077F862A5B444F4C2A116BB3832B2B7C487BBB869652FE43D0972A377
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118

File Explorer

jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118

.exe 225KB

jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118

IMPHASH 88e7c0a4d95b48414a80c3c5416f18ad
SHA256 98799ef930c1987b97321d1759eca78625741979896888a546ab338690093e0b
MD5 e702962387fe4e66af5bc2531a96e07d
SHA1 24bf6d15c162122491534bd04ae3c45d474892d2
SHA512 c92f824e02aedc1a7ec8920b9222d3b1a0f1f43fd662d53ac499657bc5b28af53c2b897d8d6b740516ef7bd7a27db3a069105f4ee5252c73323f458f8eca0dbd
SSDEEP 6144:35gLQbhytZsxEPWupfrCuGmJiF91uOlsna:35gLQbCZsxEPW4fwWCD4a
TLSH
T15D3401553790C077F862A5B444F4C2A116BB3832B2B7C487BBB869652FE43D0972A377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc LoadLibraryW FlushFileBuffers HeapSize MultiByteToWideChar GetConsoleMode GetConsoleCP LCMapStringW GetStringTypeW SetStdHandle WriteConsoleW CreateFileW GlobalFree CloseHandle GetLastError HeapCreate GlobalAlloc QueryPerformanceCounter GetCurrentProcess HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree IsProcessorFeaturePresent DecodePointer EncodePointer EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer

user32

DestroyWindow GetMessageA SetCapture LoadMenuA LoadIconA GetClientRect GetDC TranslateMessage MessageBoxA CreateWindowExA DispatchMessageA CloseWindow LoadCursorA DialogBoxParamA SetScrollInfo RegisterClassA

gdi32

GetEnhMetaFileW LineTo SetPixel SelectObject TextOutW GetStockObject MoveToEx

comdlg32

PrintDlgA

advapi32

LookupAccountSidA EqualSid GetTokenInformation OpenProcessToken

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_e702962387fe4e66af5bc2531a96e07d_JaffaCakes118

kernel32

user32

gdi32

comdlg32

advapi32

generic