bb76ed7540a0dec49577ed89042c9b39_JaffaCakes118

General

Target
bb76ed7540a0dec49577ed89042c9b39_JaffaCakes118
Size 1.2MB
Sample240618-mkptyazbke
SHA256 10bf49ec7e5c4b92fec447e9e7362e89900fb3d8542c9bffc72ffbe4d5a4cdec
MD5 bb76ed7540a0dec49577ed89042c9b39
SHA1 56293d57896df8752c92c033ae7c16d3891a97a1
SHA512 9f1be1865716e257ff461f0eabc78a5853064c9e7a3f2aa371e9cc6d829aa6ff2c114c248e96edcb0e12c525df12c72ab1d9911b7d14ecb5c2d4fd7cf5aa4a15
SSDEEP 24576:QGOQLjoogapm6uhrPoRYyKVk21hmKSKcj0yWO:nlLmac3oOfRmKpYhd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bb76ed7540a0dec49577ed89042c9b39_JaffaCakes118

.exe 1.2MB

bb76ed7540a0dec49577ed89042c9b39_JaffaCakes118

IMPHASH b919d439d8dddd431b337377b06cad54
SHA256 10bf49ec7e5c4b92fec447e9e7362e89900fb3d8542c9bffc72ffbe4d5a4cdec
MD5 bb76ed7540a0dec49577ed89042c9b39
SHA1 56293d57896df8752c92c033ae7c16d3891a97a1
SHA512 9f1be1865716e257ff461f0eabc78a5853064c9e7a3f2aa371e9cc6d829aa6ff2c114c248e96edcb0e12c525df12c72ab1d9911b7d14ecb5c2d4fd7cf5aa4a15
SSDEEP 24576:QGOQLjoogapm6uhrPoRYyKVk21hmKSKcj0yWO:nlLmac3oOfRmKpYhd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ec:3e:02:d2:95:f4:21:50:f3:33:f3:b3:ba:f9:57:3c:ac:10:12:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Andrey Hmelnikov,O=Andrey Hmelnikov,C=RU,1.2.840.113549.1.9.1=#0c1c416e647265792e486d656c6e696b6f7640686f746d61696c2e636f6d

Chains

Jun 18, 2024

Minor OS version

1

Major OS version

5

Entry point

120522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadReadPtr VirtualFree GetModuleHandleA LoadLibraryA GetCurrentProcessId GetModuleFileNameW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId ExitProcess CreateThread WaitForSingleObject CloseHandle DeleteCriticalSection FreeLibrary VirtualAlloc GetCommandLineW CreateEventA Sleep SetEvent GetCurrentProcess CreateEventW GetLastError GetFullPathNameW CopyFileW DeleteFileW GetProcAddress HeapFree GetCommandLineA GetSystemTimeAsFileTime HeapAlloc IsProcessorFeaturePresent GetProcessHeap IsDebuggerPresent EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount RtlUnwind WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetLastError InterlockedIncrement InterlockedDecrement GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers LoadLibraryExW OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW HeapReAlloc CreateFileW HeapSize SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

bb76ed7540a0dec49577ed89042c9b39_JaffaCakes118

PE Signature issue

kernel32

generic