8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118
Size 489KB
Sample240602-a82gesdf65
SHA256 cfc744e943b8dbea9120bf6c1f2b7879ac61360abc568bf918aa546ccdff3d38
MD5 8c60faeb3e28b17f0228144ac80b51af
SHA1 f3df3b74daa3e6c0e077c38a3d48096f35280800
SHA512 86a41f7a71a6dc8624cccd66af06f013055bf75bb5437d3fa417b3e8374c40eb607de30af34a782595530525096ee2194eb1ae6f4dde824172206e2fb4df4918
SSDEEP 12288:7MDIx6thES517fvsczPwo5CL4FB5uBRfAA7p87uxCzb/zNs2fNbMoD:7MDIx6thEm17f/te4P5uPfJ7pOuUTN/V
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118

.exe 489KB
befacghgbc_P.exe

.exe 674KB

8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 cfc744e943b8dbea9120bf6c1f2b7879ac61360abc568bf918aa546ccdff3d38
MD5 8c60faeb3e28b17f0228144ac80b51af
SHA1 f3df3b74daa3e6c0e077c38a3d48096f35280800
SHA512 86a41f7a71a6dc8624cccd66af06f013055bf75bb5437d3fa417b3e8374c40eb607de30af34a782595530525096ee2194eb1ae6f4dde824172206e2fb4df4918
SSDEEP 12288:7MDIx6thES517fvsczPwo5CL4FB5uBRfAA7p87uxCzb/zNs2fNbMoD:7MDIx6thEm17f/te4P5uPfJ7pOuUTN/V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d0:09:f8:cf:98:6a:56:06:5d:ec:d9:cf:e9:b9:57:b9:67:57:df:07

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Safe InstaLl Opt,O=Safe InstaLl Opt,L=Dublin,ST=Dublin,C=IE

Chains

May 23, 2024

Minor OS version

Major OS version

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

befacghgbc_P.exe

IMPHASH 15f75eb7518b93865292653a727ae1a7
SHA256 54f132d1bc338089c3ffbe65944c3c375917a860c2d146db98ad7fdca413bcaa
MD5 874fbb12caacbf56e2e02b37634218ca
SHA1 721b1d3923c7eb3dcbcae0b7b839918aaa0340c1
SHA512 03f397ed707117422a7dfebce47b4a87ac494827d42854e34c547255b02169d14ae6eeb3ff2b34ae9e59bacfe452daef49a14a4f9eda8ece672679255d46c4c6
SSDEEP 12288:qD0n2e/Ze8I5Y679YNdetEW/Stl7Rmz8qmmb271HdV0C:q4n2kEY6uPetEW/StlQIqDcdV0C
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d6:df:35:e8:de:5b:06:83:71:af:86:b6:40:a7:ae:23:64:19:66:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Safe InstaLl Opt,O=Safe InstaLl Opt,L=Dublin,ST=Dublin,C=IE

Chains

May 23, 2024

Minor OS version

Major OS version

Entry point

7946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

befacghgbc_P.exe

PE Signature issue

kernel32

generic