914de45147755212c5357f4be1ab8ac4_JaffaCakes118

General

Target
914de45147755212c5357f4be1ab8ac4_JaffaCakes118
Size 684KB
Sample240603-lljtmsbe77
SHA256 8be2e6673658e746f1118e6653088b2bff417948ac2cd7680b196997ac0b0033
MD5 914de45147755212c5357f4be1ab8ac4
SHA1 6daf910d0b4291c3ec85daa8cd38c8b26a89c293
SHA512 694669867ea9658a1f4ef5ff80e4d50d4a8e8b8a310920f598f2d12716a3f03eacc123c76f4b1887f89d7b245f8c9722eb10d2590df38fd543072765d8807ff8
SSDEEP 12288:p/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alz:psD18Xa1A3YBZffJWCNhjeFTIfMUvOlz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

914de45147755212c5357f4be1ab8ac4_JaffaCakes118

.exe 684KB

914de45147755212c5357f4be1ab8ac4_JaffaCakes118

IMPHASH dd03fc60e7803d463a19d2b3cb7edc3e
SHA256 8be2e6673658e746f1118e6653088b2bff417948ac2cd7680b196997ac0b0033
MD5 914de45147755212c5357f4be1ab8ac4
SHA1 6daf910d0b4291c3ec85daa8cd38c8b26a89c293
SHA512 694669867ea9658a1f4ef5ff80e4d50d4a8e8b8a310920f598f2d12716a3f03eacc123c76f4b1887f89d7b245f8c9722eb10d2590df38fd543072765d8807ff8
SSDEEP 12288:p/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alz:psD18Xa1A3YBZffJWCNhjeFTIfMUvOlz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ab:8f:d9:1a:3c:77:36:1e:07:31:9e:4d:ef:7c:4e:3b:8b:ab:be:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

56053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FreeLibrary VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA CreateFileA CloseHandle WriteFile GetProcAddress GetModuleHandleA LoadLibraryA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

914de45147755212c5357f4be1ab8ac4_JaffaCakes118

PE Signature issue

kernel32

generic