a3a289ae1096cd99f6da2dfe8795ee28_JaffaCakes118

General

Target
a3a289ae1096cd99f6da2dfe8795ee28_JaffaCakes118
Size 684KB
Sample240613-dpmqpssdmd
SHA256 8aceec6b39300af82a03501941df1eb43642fa121c5a8d3d13fdf695cc8c89a9
MD5 a3a289ae1096cd99f6da2dfe8795ee28
SHA1 217e58f74a87bd31ec98571da507839f450f99fc
SHA512 ad1940bd7b0b1d1346040d9c7160a0000188b96fa6efac915d3e5727b0d7d9deb01ed62636eeb1b020e0d8f9d0f73fe4473826cebdeb0861abdca3968868593b
SSDEEP 12288:O/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alg:OsD18Xa1A3YBZffJWCNhjeFTIfMUvOlg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a3a289ae1096cd99f6da2dfe8795ee28_JaffaCakes118

.exe 684KB

a3a289ae1096cd99f6da2dfe8795ee28_JaffaCakes118

IMPHASH dd03fc60e7803d463a19d2b3cb7edc3e
SHA256 8aceec6b39300af82a03501941df1eb43642fa121c5a8d3d13fdf695cc8c89a9
MD5 a3a289ae1096cd99f6da2dfe8795ee28
SHA1 217e58f74a87bd31ec98571da507839f450f99fc
SHA512 ad1940bd7b0b1d1346040d9c7160a0000188b96fa6efac915d3e5727b0d7d9deb01ed62636eeb1b020e0d8f9d0f73fe4473826cebdeb0861abdca3968868593b
SSDEEP 12288:O/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alg:OsD18Xa1A3YBZffJWCNhjeFTIfMUvOlg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c0:ef:f8:67:5f:31:d7:d4:29:be:06:b9:a1:99:11:9b:9b:98:37:59

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

56053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FreeLibrary VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA CreateFileA CloseHandle WriteFile GetProcAddress GetModuleHandleA LoadLibraryA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

a3a289ae1096cd99f6da2dfe8795ee28_JaffaCakes118

PE Signature issue

kernel32

generic