jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118

General

Target
jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118
Size 715KB
Sample260915-vfxb8avx6j
SHA256 1902475d24a88ba4745e068e22815fa1dfdd703db2a121782263ddaa41fa3f36
MD5 e73c26cfa5ddfad7ecb53412b9050b24
SHA1 3b1d67ca17c9d8e2d25e4ae5acbcf07a308835e8
SHA512 a3a6c290b4879e33612fc810faed58278f41435c597eb9c6df4b962a32b38d9c4c8f88ecbe99aba3294d2325d6ee9209f033918dcde388be462394465561fe40
SSDEEP 12288:n7PbMfT0mA9ZbOkyIqJitZ6r1LwtQjQQiE3sodVGlAP/f490Dp0oVSpbjeni/:nLNXJqKZa5jQQiE3soduAP/f49Y0wGIS
TLSH
T1C1F4CF2131779C62E0B818358E7CB9AE596D2D311F2F219BB39012365A78770B7337E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118

File Explorer

jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118

.exe 715KB

jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118

IMPHASH 7e6d410cb0ee9d4d9be8ad4e6fd75b64
SHA256 1902475d24a88ba4745e068e22815fa1dfdd703db2a121782263ddaa41fa3f36
MD5 e73c26cfa5ddfad7ecb53412b9050b24
SHA1 3b1d67ca17c9d8e2d25e4ae5acbcf07a308835e8
SHA512 a3a6c290b4879e33612fc810faed58278f41435c597eb9c6df4b962a32b38d9c4c8f88ecbe99aba3294d2325d6ee9209f033918dcde388be462394465561fe40
SSDEEP 12288:n7PbMfT0mA9ZbOkyIqJitZ6r1LwtQjQQiE3sodVGlAP/f490Dp0oVSpbjeni/:nLNXJqKZa5jQQiE3soduAP/f49Y0wGIS
TLSH
T1C1F4CF2131779C62E0B818358E7CB9AE596D2D311F2F219BB39012365A78770B7337E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

138269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetSystemInfo GetTickCount GetModuleHandleW FindResourceW GetConsoleWindow CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW

user32

ShowWindow MessageBoxA MessageBeep

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118

kernel32

user32

generic