a3324799baf5f93b04334e42d4e25ce2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3324799baf5f93b04334e42d4e25ce2_JaffaCakes118
Size 776KB
Sample240613-a2a1ws1ejp
SHA256 1062ee4302ed8c5f97bb35548bc6ad57909aef85e7d632362a2dfd266abf6c0e
MD5 a3324799baf5f93b04334e42d4e25ce2
SHA1 952249d2ffb4f4f9ba41669be0309973fc071704
SHA512 2d8b9f419cba6e95d35d6564b0a2c26c2c76eb67b619c3ce585fa8421367aea51eee3011fb4a1dc1050f856ad4c677dffbd404ded1c7892a5387dbce69ee3146
SSDEEP 12288:xG34RGZbsqt/egpPeu83dUAAO5K5Ye7iQ0y/XqbrRtMPbhlLBQ:w64sqt2wq0jq2iQ0UXqbrRt0TLBQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a3324799baf5f93b04334e42d4e25ce2_JaffaCakes118

.exe 776KB

a3324799baf5f93b04334e42d4e25ce2_JaffaCakes118

IMPHASH 271899255abcac09acc7987d146b367b
SHA256 1062ee4302ed8c5f97bb35548bc6ad57909aef85e7d632362a2dfd266abf6c0e
MD5 a3324799baf5f93b04334e42d4e25ce2
SHA1 952249d2ffb4f4f9ba41669be0309973fc071704
SHA512 2d8b9f419cba6e95d35d6564b0a2c26c2c76eb67b619c3ce585fa8421367aea51eee3011fb4a1dc1050f856ad4c677dffbd404ded1c7892a5387dbce69ee3146
SSDEEP 12288:xG34RGZbsqt/egpPeu83dUAAO5K5Ye7iQ0y/XqbrRtMPbhlLBQ:w64sqt2wq0jq2iQ0UXqbrRt0TLBQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

7c:05:86:62:7d:e0:b4:a8:ae:2b:04:65:8f:25:47:13:08:3b:cb:86

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Digital Plugin SL,O=Digital Plugin SL,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

32342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsDebuggerPresent LoadLibraryW GetModuleFileNameA GetModuleFileNameW WideCharToMultiByte LockResource VirtualAlloc TerminateProcess ReadProcessMemory WriteProcessMemory GetThreadContext LoadResource SizeofResource GetModuleHandleW GetLastError GetCommandLineA FindResourceW FindResourceExW MultiByteToWideChar FreeConsole InitializeCriticalSectionAndSpinCount RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap GetCurrentProcess GetProcAddress FreeLibrary CreateProcessA InterlockedDecrement CreateFileW FlushFileBuffers WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP CloseHandle OutputDebugStringW LoadLibraryExW GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType InterlockedIncrement Sleep EncodePointer DecodePointer GetStringTypeW LocalFree GetCommandLineW RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsProcessorFeaturePresent LCMapStringW GetCurrentThreadId ExitProcess GetModuleHandleExW GetStdHandle WriteFile

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoCreateInstance

oleaut32

SysFreeString VariantClear SysStringByteLen SysAllocStringByteLen

shlwapi

PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

a3324799baf5f93b04334e42d4e25ce2_JaffaCakes118

PE Signature issue

kernel32

advapi32

ole32

oleaut32

shlwapi

generic