84699e397289bf752688c3c81acb799f_JaffaCakes118

General

Target
84699e397289bf752688c3c81acb799f_JaffaCakes118
Size 681KB
Sample240530-remvlsbb3v
SHA256 a1340b1638268910dc2961f7d5434391d02725b69b357cf0452ad7ac715e13cd
MD5 84699e397289bf752688c3c81acb799f
SHA1 877c94126de9ea6e972eb8e4a6e3498164f694b2
SHA512 739788575cb540bd843a561216e2d2fd99d0b211d087f8927c0888aa6c1eb661df53e385cda923510653ab68c820c73ac5f96298aeee03ad6bf13f0732f97a66
SSDEEP 12288:RgM0xX/tdDZxZi/WARQQfvZeBG72lD/y0CIhPUW2HwuMg4IZXfO34NENPRH8V97I:RgdNi/WhkRn72B/y0CsUwcBO3oEN5H+I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

84699e397289bf752688c3c81acb799f_JaffaCakes118

.exe 681KB

84699e397289bf752688c3c81acb799f_JaffaCakes118

IMPHASH 505eacc8e8dacd9ab2bf1a20526875b4
SHA256 a1340b1638268910dc2961f7d5434391d02725b69b357cf0452ad7ac715e13cd
MD5 84699e397289bf752688c3c81acb799f
SHA1 877c94126de9ea6e972eb8e4a6e3498164f694b2
SHA512 739788575cb540bd843a561216e2d2fd99d0b211d087f8927c0888aa6c1eb661df53e385cda923510653ab68c820c73ac5f96298aeee03ad6bf13f0732f97a66
SSDEEP 12288:RgM0xX/tdDZxZi/WARQQfvZeBG72lD/y0CIhPUW2HwuMg4IZXfO34NENPRH8V97I:RgdNi/WhkRn72B/y0CsUwcBO3oEN5H+I
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d4:0a:95:ea:fd:4e:80:b4:6c:5a:44:49:38:89:4d:9d:4d:fb:e0:a7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Stanislav Kabin,O=Stanislav Kabin,C=RU,1.2.840.113549.1.9.1=#0c1b5374616e69736c61762e4b6162696e40686f746d61696c2e636f6d

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

50293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FreeLibrary VirtualFree GetModuleFileNameW GetTempPathA RemoveDirectoryA SetCurrentDirectoryA CreateDirectoryA CreateFileA CloseHandle WriteFile GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

84699e397289bf752688c3c81acb799f_JaffaCakes118

PE Signature issue

kernel32

generic