a47b0750d6a8c81620416641dcccab9b_JaffaCakes118

General

Target
a47b0750d6a8c81620416641dcccab9b_JaffaCakes118
Size 684KB
Sample240613-jktakszcnd
SHA256 564c6c711d7b170a50f40f333b9bacdb4fa81b3cd5464d83dcff94b57d88e65c
MD5 a47b0750d6a8c81620416641dcccab9b
SHA1 addc78a361c99e72e8201c3a51e069d8585f6be1
SHA512 bd16c3fc443a32abec875db0df9557c7375dc3adc70850f583e9a429b42f4f2920d4819a4389639d4c1e435389b02f9218b46c3609d06f8b660e5bf8c3a07d62
SSDEEP 12288:v/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alit:vsD18Xa1A3YBZffJWCNhjeFTIfMUvOl2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a47b0750d6a8c81620416641dcccab9b_JaffaCakes118

.exe 684KB

a47b0750d6a8c81620416641dcccab9b_JaffaCakes118

IMPHASH dd03fc60e7803d463a19d2b3cb7edc3e
SHA256 564c6c711d7b170a50f40f333b9bacdb4fa81b3cd5464d83dcff94b57d88e65c
MD5 a47b0750d6a8c81620416641dcccab9b
SHA1 addc78a361c99e72e8201c3a51e069d8585f6be1
SHA512 bd16c3fc443a32abec875db0df9557c7375dc3adc70850f583e9a429b42f4f2920d4819a4389639d4c1e435389b02f9218b46c3609d06f8b660e5bf8c3a07d62
SSDEEP 12288:v/ZqsC9Pa6P8Xu+Y0+4Kk3R61B0iYWfJWCMQHxvZj3uHcwTIfM1GjT9Alit:vsD18Xa1A3YBZffJWCNhjeFTIfMUvOl2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

99:e9:68:4f:3e:e5:a6:3d:a1:f7:1f:a6:ab:6a:87:70:e2:5d:51:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

56053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FreeLibrary VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA CreateFileA CloseHandle WriteFile GetProcAddress GetModuleHandleA LoadLibraryA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

a47b0750d6a8c81620416641dcccab9b_JaffaCakes118

PE Signature issue

kernel32

generic