84413896cf109659a85e5db2dc206280_JaffaCakes118

General

Target
84413896cf109659a85e5db2dc206280_JaffaCakes118
Size 703KB
Sample240530-qef7dsag86
SHA256 1b111909ce7998ade06cf4af54a9bb7576ded31e1ad8e8a59ae65945e573fce7
MD5 84413896cf109659a85e5db2dc206280
SHA1 5bb3623c4181e838effcefe5a5a1a8b51ed630d5
SHA512 827e7ce648fe995cc069867b542a6db6132d2d421d17508cd1c5484df14883e15948fd5f4b38c990d8d948dd392f73261b99eade46d4889e10a0544b8f44fa06
SSDEEP 12288:oviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24WJ:MYLqv/gaTbisSqrQL6yoQfhdC24WJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

84413896cf109659a85e5db2dc206280_JaffaCakes118

.exe 703KB

84413896cf109659a85e5db2dc206280_JaffaCakes118

IMPHASH ca99fb971559dcd4251682cec3e80e57
SHA256 1b111909ce7998ade06cf4af54a9bb7576ded31e1ad8e8a59ae65945e573fce7
MD5 84413896cf109659a85e5db2dc206280
SHA1 5bb3623c4181e838effcefe5a5a1a8b51ed630d5
SHA512 827e7ce648fe995cc069867b542a6db6132d2d421d17508cd1c5484df14883e15948fd5f4b38c990d8d948dd392f73261b99eade46d4889e10a0544b8f44fa06
SSDEEP 12288:oviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24WJ:MYLqv/gaTbisSqrQL6yoQfhdC24WJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

13:02:e6:c6:cc:8b:18:e1:cb:81:86:99:99:97:cf:cf:70:bf:d0:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

53175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary ExitProcess VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA WriteFile CloseHandle CreateFileA GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

84413896cf109659a85e5db2dc206280_JaffaCakes118

PE Signature issue

kernel32

generic