a7bcad18d846d8191d497191b9f68957_JaffaCakes118

General

Target
a7bcad18d846d8191d497191b9f68957_JaffaCakes118
Size 703KB
Sample240614-c4sptssdja
SHA256 5138edb73178a256a9bbadd7aa58d253d88968f82130d7fb4db7768900f79274
MD5 a7bcad18d846d8191d497191b9f68957
SHA1 070c53e21780cd89e72cfb45bf613f67fcdb906b
SHA512 893fa1a99d21d9e35debbb6b95df7d88d478295182318eb02e86bcdf7ab5ae36719adb5dc33d87f9e73eef499c0ed6d00638e0b08c6b5e15bb3283a5356bbd21
SSDEEP 12288:YviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24WI:cYLqv/gaTbisSqrQL6yoQfhdC24WI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a7bcad18d846d8191d497191b9f68957_JaffaCakes118

.exe 703KB

a7bcad18d846d8191d497191b9f68957_JaffaCakes118

IMPHASH ca99fb971559dcd4251682cec3e80e57
SHA256 5138edb73178a256a9bbadd7aa58d253d88968f82130d7fb4db7768900f79274
MD5 a7bcad18d846d8191d497191b9f68957
SHA1 070c53e21780cd89e72cfb45bf613f67fcdb906b
SHA512 893fa1a99d21d9e35debbb6b95df7d88d478295182318eb02e86bcdf7ab5ae36719adb5dc33d87f9e73eef499c0ed6d00638e0b08c6b5e15bb3283a5356bbd21
SSDEEP 12288:YviyjlMsGhLqVjJ/gaTbiO/7hlS85TMalRU24LJgyo/30pFfhdC24WI:cYLqv/gaTbisSqrQL6yoQfhdC24WI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

47:51:40:78:b4:a9:68:43:42:18:17:11:63:0f:da:27:93:a0:bc:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Oleh Aleksyuk,O=Oleh Aleksyuk,C=RU,1.2.840.113549.1.9.1=#0c196f6c65682e616c656b7379756b40686f746d61696c2e636f6d

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

53175

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary ExitProcess VirtualFree GetModuleFileNameW GetTempPathA CreateDirectoryA RemoveDirectoryA SetCurrentDirectoryA WriteFile CloseHandle CreateFileA GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualAlloc GetLastError HeapFree ReadFile GetCommandLineA HeapAlloc GetProcessHeap IsProcessorFeaturePresent IsDebuggerPresent EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetStartupInfoW RtlUnwind GetCurrentProcessId SetLastError InterlockedIncrement InterlockedDecrement GetCurrentThreadId Sleep GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetStdHandle FlushFileBuffers GetConsoleCP CreateFileW GetFileAttributesExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LoadLibraryExW OutputDebugStringW LoadLibraryW WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

a7bcad18d846d8191d497191b9f68957_JaffaCakes118

PE Signature issue

kernel32

generic