a311dc8755c967c6301c020d8c25fc75_JaffaCakes118

General

Target
a311dc8755c967c6301c020d8c25fc75_JaffaCakes118
Size 703KB
Sample240613-adn8lszenq
SHA256 1d680040b6d82e4249188d42e7e4e77f143f86408db0362e5a53795f4edd809d
MD5 a311dc8755c967c6301c020d8c25fc75
SHA1 f355a19257f68807192212cc98193015aefe15f3
SHA512 9ec468745d44ab5f8011dc9284845ab1f13f7ce71f040b992ad25e274901012b2318ed45234937e266a89fb055261a015dfea886b0285cc60ff18502b20ad794
SSDEEP 12288:uviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24Wx:OYLqv/gaTbisSqrQL6yoQfhdC24Wx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a311dc8755c967c6301c020d8c25fc75_JaffaCakes118

.exe 703KB

a311dc8755c967c6301c020d8c25fc75_JaffaCakes118

IMPHASH ca99fb971559dcd4251682cec3e80e57
SHA256 1d680040b6d82e4249188d42e7e4e77f143f86408db0362e5a53795f4edd809d
MD5 a311dc8755c967c6301c020d8c25fc75
SHA1 f355a19257f68807192212cc98193015aefe15f3
SHA512 9ec468745d44ab5f8011dc9284845ab1f13f7ce71f040b992ad25e274901012b2318ed45234937e266a89fb055261a015dfea886b0285cc60ff18502b20ad794
SSDEEP 12288:uviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24Wx:OYLqv/gaTbisSqrQL6yoQfhdC24Wx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

02:1c:1f:e7:52:17:8a:f9:c1:1b:e6:e6:8c:4c:f1:75:77:14:70:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

53175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary ExitProcess VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA WriteFile CloseHandle CreateFileA GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

a311dc8755c967c6301c020d8c25fc75_JaffaCakes118

PE Signature issue

kernel32

generic