7d8f0a53352c9188acef922dbecfa588_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
7d8f0a53352c9188acef922dbecfa588_JaffaCakes118
Size 577KB
Sample240731-xmp8laybqq
SHA256 e12b58b042e361d227d4cc3e60e5b5c8ef49c7f70c306d1159c71a7eb335f5cd
MD5 7d8f0a53352c9188acef922dbecfa588
SHA1 dc6115bdc6d63f476203e54e40cb35df72d4014d
SHA512 6dd3b5d633344f0ee5d59589c28f45ab3647c5d41da27fe39f3025b826b2043a4fc094862762d4080d6546acac4996d25484501b09dc18da597dfb42e6600fa6
SSDEEP 12288:TCLIa6MfgkSnojUbPYLAwiw7gku+uFvTBMrKr:uLI8LLAwxgr7r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

7d8f0a53352c9188acef922dbecfa588_JaffaCakes118

.exe 577KB

7d8f0a53352c9188acef922dbecfa588_JaffaCakes118

IMPHASH 5e73b19ed62be5256f3249cf57eebc14
SHA256 e12b58b042e361d227d4cc3e60e5b5c8ef49c7f70c306d1159c71a7eb335f5cd
MD5 7d8f0a53352c9188acef922dbecfa588
SHA1 dc6115bdc6d63f476203e54e40cb35df72d4014d
SHA512 6dd3b5d633344f0ee5d59589c28f45ab3647c5d41da27fe39f3025b826b2043a4fc094862762d4080d6546acac4996d25484501b09dc18da597dfb42e6600fa6
SSDEEP 12288:TCLIa6MfgkSnojUbPYLAwiw7gku+uFvTBMrKr:uLI8LLAwxgr7r
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

20:2b:35:12:12:45:60:a0:cc:cb:70:1d:59:63:18:88:be:ff:99:55

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=0000783996,CN=NEEDCODE SP Z O O,O=NEEDCODE SP Z O O,L=KRAKÓW,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Chains

Jul 26, 2024

Minor OS version

Major OS version

Entry point

15231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Izidu\Desktop\2019\WindowsSDK7-Samples-master\WindowsSDK7-Samples-master\winui\pictures\pictureacquisition\Release\AcquireTest.pdb

comctl32

InitCommonControlsEx

kernel32

GetCommandLineW CreateDirectoryW DeleteFileW OutputDebugStringW CloseHandle ExitProcess CreateThread VirtualAlloc LocalFree lstrlenW FreeConsole CreateFileW DecodePointer SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetConsoleCtrlHandler GetProcessHeap LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW OutputDebugStringA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW GetStringTypeW SetStdHandle SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer GetStdHandle WriteFile GetModuleFileNameW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetCurrentThread HeapAlloc HeapFree GetFileType FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage WriteConsoleW

user32

DispatchMessageW PeekMessageW TranslateMessage LoadStringW MsgWaitForMultipleObjects SendMessageW GetDesktopWindow MessageBoxW DialogBoxParamW EnableWindow GetWindowTextLengthW IsDlgButtonChecked GetDlgItemTextW GetDlgItem EndDialog

shell32

CommandLineToArgvW

ole32

CoUninitialize CoCreateInstance PropVariantCopy PropVariantClear CoTaskMemFree CoInitialize

oleaut32

SysFreeString

Name

.text

Size

355KB

Virtual Size

355KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7d8f0a53352c9188acef922dbecfa588_JaffaCakes118

PE Signature issue

comctl32

kernel32

user32

shell32

ole32

oleaut32

generic