931424fd93fe86511ef891f857d53b20_JaffaCakes118

General

Target
931424fd93fe86511ef891f857d53b20_JaffaCakes118
Size 298KB
Sample240604-aes8yseh98
SHA256 10188fd6ae12cced20adc4c174d65b25a120cc14b46a1c41c0255026ad73b7a0
MD5 931424fd93fe86511ef891f857d53b20
SHA1 8b6ba850025ad78a72ce391f7a33212f79fd3cf6
SHA512 a90c6e0333634b8833ffaa6003c380ac870d6bd22edb72b4efe2efb1db15c4a0f7cb7517d629fd0eeefa88e472e99f97779a0020cf54c304fc38f3488851bef0
SSDEEP 3072:h+dNo+L1hFQUx2LsJFsf2SWRwizmy+gplMQ0iCezPwJagfy8I5iIZfQPdtASDpO2:hANoi1f5FdRw+1+RLwsJa4I5P23zDpO2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

931424fd93fe86511ef891f857d53b20_JaffaCakes118

.exe 298KB

931424fd93fe86511ef891f857d53b20_JaffaCakes118

IMPHASH a8f737d51812b6886d60e29c978f4242
SHA256 10188fd6ae12cced20adc4c174d65b25a120cc14b46a1c41c0255026ad73b7a0
MD5 931424fd93fe86511ef891f857d53b20
SHA1 8b6ba850025ad78a72ce391f7a33212f79fd3cf6
SHA512 a90c6e0333634b8833ffaa6003c380ac870d6bd22edb72b4efe2efb1db15c4a0f7cb7517d629fd0eeefa88e472e99f97779a0020cf54c304fc38f3488851bef0
SSDEEP 3072:h+dNo+L1hFQUx2LsJFsf2SWRwizmy+gplMQ0iCezPwJagfy8I5iIZfQPdtASDpO2:hANoi1f5FdRw+1+RLwsJa4I5P23zDpO2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

62:0f:a8:8e:a9:1a:a5:8e:fa:e3:26:23:cb:ef:dd:7d:ee:c4:92:0a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Egor Klochko,O=Egor Klochko,C=UA,1.2.840.113549.1.9.1=#0c167374726f6e672e6b6c6f63686b6f406c6973742e7275

Chains

Jun 3, 2024

Minor OS version

1

Major OS version

5

Entry point

28830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

931424fd93fe86511ef891f857d53b20_JaffaCakes118

PE Signature issue

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

931424fd93fe86511ef891f857d53b20_JaffaCakes118

PE Signature issue

kernel32

generic