89439e83a8f839dbb2290feb3afa5dc4_JaffaCakes118

General

Target
89439e83a8f839dbb2290feb3afa5dc4_JaffaCakes118
Size 684KB
Sample240601-d8l9aahc65
SHA256 1b62fd88557d629955077cdc45477857191aa88583b6fd0c24c2eccaa5632ddc
MD5 89439e83a8f839dbb2290feb3afa5dc4
SHA1 7328010d7824a9c5ebaf1d7a5811833bcb521f10
SHA512 e6185de61d205e1b1c6302af055a89bd8be907b900efa85b57d2ad943a2417fb6895c4f291dc01284dd6824a7d8059be312044cce77b5168e5cb74ec92cc1b97
SSDEEP 12288:Y/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9AlO:YsD18Xa1A3YBZffJWCNhjeFTIfMUvOlO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

89439e83a8f839dbb2290feb3afa5dc4_JaffaCakes118

.exe 684KB

89439e83a8f839dbb2290feb3afa5dc4_JaffaCakes118

IMPHASH dd03fc60e7803d463a19d2b3cb7edc3e
SHA256 1b62fd88557d629955077cdc45477857191aa88583b6fd0c24c2eccaa5632ddc
MD5 89439e83a8f839dbb2290feb3afa5dc4
SHA1 7328010d7824a9c5ebaf1d7a5811833bcb521f10
SHA512 e6185de61d205e1b1c6302af055a89bd8be907b900efa85b57d2ad943a2417fb6895c4f291dc01284dd6824a7d8059be312044cce77b5168e5cb74ec92cc1b97
SSDEEP 12288:Y/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9AlO:YsD18Xa1A3YBZffJWCNhjeFTIfMUvOlO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

fe:4e:2e:95:a6:a9:00:62:0d:87:fa:3c:91:da:f1:2b:49:35:b9:ca

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

56053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FreeLibrary VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA CreateFileA CloseHandle WriteFile GetProcAddress GetModuleHandleA LoadLibraryA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

89439e83a8f839dbb2290feb3afa5dc4_JaffaCakes118

PE Signature issue

kernel32

generic