737518c1278c92388557fe29b352769e_JaffaCakes118

General

Target
737518c1278c92388557fe29b352769e_JaffaCakes118
Size 703KB
Sample240525-2ewgvsdd43
SHA256 4dddc773404d9aae7eac12a237a8d28b68ec61b2279a0f8a4167502c2f773340
MD5 737518c1278c92388557fe29b352769e
SHA1 66de1c936a8093a8b4c4994a541d04ea81f942b6
SHA512 61cd10cda8f138977c137c1016d918c074dced91b074f4afc253d78b1ecf7a45f4b8c0a2689bb96ff8bb8bc386d4902136d0d95b5462136ee29993f72bba7881
SSDEEP 12288:jviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24W2:bYLqv/gaTbisSqrQL6yoQfhdC24W2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

737518c1278c92388557fe29b352769e_JaffaCakes118

.exe 703KB

737518c1278c92388557fe29b352769e_JaffaCakes118

IMPHASH ca99fb971559dcd4251682cec3e80e57
SHA256 4dddc773404d9aae7eac12a237a8d28b68ec61b2279a0f8a4167502c2f773340
MD5 737518c1278c92388557fe29b352769e
SHA1 66de1c936a8093a8b4c4994a541d04ea81f942b6
SHA512 61cd10cda8f138977c137c1016d918c074dced91b074f4afc253d78b1ecf7a45f4b8c0a2689bb96ff8bb8bc386d4902136d0d95b5462136ee29993f72bba7881
SSDEEP 12288:jviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24W2:bYLqv/gaTbisSqrQL6yoQfhdC24W2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

80:0b:36:fd:db:9f:f7:f0:ad:d4:8f:08:c0:e5:cd:e1:9c:38:12:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

53175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary ExitProcess VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA WriteFile CloseHandle CreateFileA GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

737518c1278c92388557fe29b352769e_JaffaCakes118

PE Signature issue

kernel32

generic