9315abe3440498dc568c7f0dbf2ae3cc_JaffaCakes118

General

Target
9315abe3440498dc568c7f0dbf2ae3cc_JaffaCakes118
Size 698KB
Sample240604-afyj3aeb91
SHA256 746b8dc58ea77dd91c0f09dce9cc53e02fd961eac5d52c2f986353afcc39cddd
MD5 9315abe3440498dc568c7f0dbf2ae3cc
SHA1 2ee3633c013aa9209b8b2bba9f2e4ed0f03441e5
SHA512 f784cc76ceccf28389e587fa7ea91bc8009e3b9449b13c588f720ba043ef5b2fb628360598994804cacda5239eab6f2ebaf59dfda181d0e3cb93f268392882e3
SSDEEP 12288:Og7jxO82D4pT9FI29tM+lRXoTJ9cAsOYl7DqQvJ4b/:txE4HF/M+XiBsOY5DDC/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9315abe3440498dc568c7f0dbf2ae3cc_JaffaCakes118

.exe 698KB

9315abe3440498dc568c7f0dbf2ae3cc_JaffaCakes118

IMPHASH 7c8e0a5aa0e0576a0782eac278d1f0a0
SHA256 746b8dc58ea77dd91c0f09dce9cc53e02fd961eac5d52c2f986353afcc39cddd
MD5 9315abe3440498dc568c7f0dbf2ae3cc
SHA1 2ee3633c013aa9209b8b2bba9f2e4ed0f03441e5
SHA512 f784cc76ceccf28389e587fa7ea91bc8009e3b9449b13c588f720ba043ef5b2fb628360598994804cacda5239eab6f2ebaf59dfda181d0e3cb93f268392882e3
SSDEEP 12288:Og7jxO82D4pT9FI29tM+lRXoTJ9cAsOYl7DqQvJ4b/:txE4HF/M+XiBsOY5DDC/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

f3:86:34:5d:c9:3f:fb:c8:29:be:38:0f:64:2d:bc:30:26:b7:64:69

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

Jun 3, 2024

Minor OS version

1

Major OS version

5

Entry point

53611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary ExitProcess VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA SetCurrentDirectoryA RemoveDirectoryA CreateFileA WriteFile CloseHandle GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

9315abe3440498dc568c7f0dbf2ae3cc_JaffaCakes118

PE Signature issue

kernel32

generic