9252d91db3abfbb63c7b62e6c2c0df60_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9252d91db3abfbb63c7b62e6c2c0df60_JaffaCakes118
Size 577KB
Sample240603-s8ddpsbc9t
SHA256 f32fdc462294d181ed8184aa7b53b7ab386689fe2c85248f8f704750bf6f548a
MD5 9252d91db3abfbb63c7b62e6c2c0df60
SHA1 6541e61ef715dc4aaa151769c537a2d57fe86388
SHA512 1385da844352b3c26bd206c470bedadd4ad24a6b177e0198156c1e4cd495b59c312bc25c31ee890b7eb80efa6aeb7a5f9329c5705070abb63b36c49e656850e4
SSDEEP 12288:YDPdsil5fCMggBIiMVO26kk+FGpeMb01JQntLOCViosUy:YD1s2ts96kTeemV4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9252d91db3abfbb63c7b62e6c2c0df60_JaffaCakes118

.exe 577KB

9252d91db3abfbb63c7b62e6c2c0df60_JaffaCakes118

IMPHASH 81fd276d49dcfb5944ab1253641f139e
SHA256 f32fdc462294d181ed8184aa7b53b7ab386689fe2c85248f8f704750bf6f548a
MD5 9252d91db3abfbb63c7b62e6c2c0df60
SHA1 6541e61ef715dc4aaa151769c537a2d57fe86388
SHA512 1385da844352b3c26bd206c470bedadd4ad24a6b177e0198156c1e4cd495b59c312bc25c31ee890b7eb80efa6aeb7a5f9329c5705070abb63b36c49e656850e4
SSDEEP 12288:YDPdsil5fCMggBIiMVO26kk+FGpeMb01JQntLOCViosUy:YD1s2ts96kTeemV4
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

47:ca:06:64:d9:0d:57:8d:78:e4:89:20:c1:50:98:ea:65:b6:fb:06:e9:75:fa:7d:6e:38:e5:ef:e6:34:23:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Nummorum,O=Nummorum,POSTALCODE=3831 GK,STREET=Beemden 13,L=Leusden,ST=Noord-Holland,C=NL

Chains

Jun 3, 2024

Minor OS version

Major OS version

Entry point

209090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

setup.pdb

kernel32

GetNativeSystemInfo EndUpdateResourceW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetEvent CreateEventW LoadResource LockResource SizeofResource FindResourceW GetEnvironmentVariableW ExpandEnvironmentStringsW CreateDirectoryW DeleteFileW GetFileAttributesW GetTempFileNameW ReadFile OpenProcess GetCurrentProcess GetSystemInfo GetSystemDirectoryW GetWindowsDirectoryW GetVersionExW GetModuleFileNameW GlobalAlloc GlobalFree LocalFree FormatMessageW CopyFileW GetDateFormatW GetTimeFormatW CompareStringW WideCharToMultiByte RaiseException InitializeCriticalSectionAndSpinCount GetCurrentProcessId Sleep HeapSetInformation SetFilePointer GetDiskFreeSpaceExW CreateFileW DeleteCriticalSection CreateThread LeaveCriticalSection EnterCriticalSection InitializeCriticalSection lstrlenW MulDiv GetTickCount GetExitCodeProcess LoadLibraryW GetTempPathW SwitchToThread FindNextFileW UpdateResourceA BeginUpdateResourceA FindResourceA lstrlenA DeleteFileA CreateFileA UpdateResourceW BeginUpdateResourceW GetVersion GetEnvironmentVariableA HeapReAlloc HeapSize WriteConsoleW ReadConsoleW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW SetEndOfFile OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType FindFirstFileW FindClose GetProcAddress FreeLibrary WaitForSingleObject GetLastError CloseHandle WriteFile GetStringTypeW HeapAlloc HeapFree GetACP GetModuleHandleExW ExitProcess MultiByteToWideChar VirtualProtect VirtualQuery GetModuleHandleW LoadLibraryExA QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle

gdi32

GetStockObject EnumFontFamiliesExW DeleteObject CreateFontIndirectW GetObjectW GetTextMetricsW SelectObject GetTextExtentPoint32W GetDeviceCaps DeleteDC CreateCompatibleDC

ole32

CoUninitialize CoInitialize

secur32

GetComputerObjectNameW

shell32

ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteW ShellExecuteA

user32

SystemParametersInfoW IsDialogMessageW LoadImageW LoadIconW LoadCursorW SetClassLongW ScreenToClient GetWindowRect GetClientRect SetWindowTextW ShowScrollBar SetForegroundWindow EnableWindow GetFocus SetFocus SendDlgItemMessageW SetDlgItemTextW GetDlgItem CreateDialogIndirectParamW CreateDialogParamW MoveWindow ShowWindow DestroyWindow SendMessageW SendMessageA PeekMessageW DispatchMessageW TranslateMessage ExitWindowsEx MessageBoxW ReleaseDC GetDC DrawTextW GetSystemMetrics GetDialogBaseUnits MessageBoxA SetCursor MsgWaitForMultipleObjects

crypt32

CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy

wininet

InternetCrackUrlW InternetCombineUrlW

msi

ord8 ord78 ord150 ord92

Sharing

General

Malware Config

Signatures

File Explorer

9252d91db3abfbb63c7b62e6c2c0df60_JaffaCakes118

PE Signature issue

kernel32

gdi32

ole32

secur32

shell32

user32

crypt32

wininet

msi

generic