a3cc1889689de0867296130aaeb71c28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3cc1889689de0867296130aaeb71c28_JaffaCakes118
Size 703KB
Sample240613-evl7sstfme
SHA256 fa37bcfeae70dc8509d72745cfe97667487173eb6a488feffc2f519dcfe35afb
MD5 a3cc1889689de0867296130aaeb71c28
SHA1 15652c97b2702a8236573566c582d33647549432
SHA512 f4fc3eca60cb3707331c4aa1d97b39329e65033b5c149f185b2e9df9a19e4286c8f8eb6bafd67e09e78d75f4c84d8478a1873b6dedf1d61ec2069ff645508b5e
SSDEEP 12288:BHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86r:BHMiAe5aIWiFHktK7eDpMgvO11M6r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a3cc1889689de0867296130aaeb71c28_JaffaCakes118

.exe 703KB

a3cc1889689de0867296130aaeb71c28_JaffaCakes118

IMPHASH 31e87b8fecdfcec6eca35961ca92b90c
SHA256 fa37bcfeae70dc8509d72745cfe97667487173eb6a488feffc2f519dcfe35afb
MD5 a3cc1889689de0867296130aaeb71c28
SHA1 15652c97b2702a8236573566c582d33647549432
SHA512 f4fc3eca60cb3707331c4aa1d97b39329e65033b5c149f185b2e9df9a19e4286c8f8eb6bafd67e09e78d75f4c84d8478a1873b6dedf1d61ec2069ff645508b5e
SSDEEP 12288:BHgLxi7Ma55+pDZIWcZWO5RgbdtK15LRCxg1RHeDpMgv4t1goX86r:BHMiAe5aIWiFHktK7eDpMgvO11M6r
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

1f:5c:50:e3:46:67:72:08:3a:2c:34:c9:76:97:d9:47:23:66:a0:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Digital Plugin SL,O=Digital Plugin SL,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

65526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW MultiByteToWideChar WideCharToMultiByte lstrlenW InterlockedDecrement GetModuleFileNameW Sleep FreeLibrary GetCurrentProcess GetProcAddress LoadLibraryW GetFileAttributesA DeleteFileW GetModuleFileNameA GetModuleHandleA CloseHandle Process32NextW Process32FirstW CreateToolhelp32Snapshot GetModuleHandleW GetVersionExW OpenProcess WaitForSingleObject WaitForDebugEvent ContinueDebugEvent GetCommandLineW GetStartupInfoW GetThreadContext ReadProcessMemory FreeConsole FindResourceW GetCommandLineA GetTempFileNameW GetTempPathW TerminateProcess SetFilePointer CreateFileW ReadFile SystemTimeToFileTime LocalFileTimeToFileTime CreateDirectoryW GetFileAttributesW GetCurrentDirectoryW SetFileTime WriteFile InterlockedIncrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException GetLocaleInfoW SetStdHandle LoadResource LockResource SizeofResource ResumeThread GetLastError WriteConsoleW GetConsoleOutputCP WriteConsoleA SetEndOfFile CreateFileA InitializeCriticalSectionAndSpinCount LoadLibraryA IsValidLocale EnumSystemLocalesA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind LCMapStringA LCMapStringW GetCPInfo ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID

user32

wsprintfW

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW GetUserNameA

ole32

CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysStringByteLen SysAllocStringByteLen VariantClear

shlwapi

PathFindFileNameW StrStrIW StrStrIA

Sharing

General

Malware Config

Signatures

File Explorer

a3cc1889689de0867296130aaeb71c28_JaffaCakes118

PE Signature issue

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic