84cd6aa3c186f4ccb1a62d854aef4edd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
84cd6aa3c186f4ccb1a62d854aef4edd_JaffaCakes118
Size 268KB
Sample240810-e4tm8swckj
SHA256 7314f1d0e17ef476e05c1f6b5b4eb741fa678a75545c8611571ed64fab5a3ffa
MD5 84cd6aa3c186f4ccb1a62d854aef4edd
SHA1 b34c43d4fe3e7eed7a7484bbc21f9c8591bd25b9
SHA512 73f347043a4362376eac0a6c815cf2481defd37f7a0febfe634bf0c45879363321fe8d1b201297936e52deb50c4526ae2a682d5da4a94e70aa352fe37553276b
SSDEEP 3072:EfaRbrjohi5LtEOe6/vvCr88J4LBqLGmGmT9Q0MlWxWhndSIvi6pf2v7u9J:EyBuOTHCQLBqLHGmhQ95TJ2EJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

84cd6aa3c186f4ccb1a62d854aef4edd_JaffaCakes118

.exe 268KB

84cd6aa3c186f4ccb1a62d854aef4edd_JaffaCakes118

IMPHASH 2b7ff9f7fe575a6d22142d59ef09ac40
SHA256 7314f1d0e17ef476e05c1f6b5b4eb741fa678a75545c8611571ed64fab5a3ffa
MD5 84cd6aa3c186f4ccb1a62d854aef4edd
SHA1 b34c43d4fe3e7eed7a7484bbc21f9c8591bd25b9
SHA512 73f347043a4362376eac0a6c815cf2481defd37f7a0febfe634bf0c45879363321fe8d1b201297936e52deb50c4526ae2a682d5da4a94e70aa352fe37553276b
SSDEEP 3072:EfaRbrjohi5LtEOe6/vvCr88J4LBqLGmGmT9Q0MlWxWhndSIvi6pf2v7u9J:EyBuOTHCQLBqLHGmhQ95TJ2EJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c2:cc:06:bf:60:49:07:ae:32:c9:12:bc:ff:43:07:c1:47:a5:a8:78

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Guangzhou Kugou Computer Technology Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Guangzhou Kugou Computer Technology Co.\, Ltd.,L=Guangzhou,ST=Guangdong,C=CN

Chains

Aug 5, 2024

Minor OS version

Major OS version

Entry point

116068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\work\VC\info\setup_x_86\setup_x_86\Release\setup_x_86.pdb

kernel32

SetFileAttributesW SetFileAttributesA WideCharToMultiByte MultiByteToWideChar GetModuleFileNameW GetTempPathW GetSystemDirectoryW Sleep WinExec SetCurrentDirectoryW TerminateProcess GetCurrentProcess SetLocaleInfoW CompareStringA GetLastError GetProcessHeap SetEndOfFile GetLocaleInfoW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle CreateFileW InitializeCriticalSectionAndSpinCount LoadLibraryA GetModuleHandleA GetCurrentProcessId QueryPerformanceCounter GetCommandLineW GetLocalTime GetTickCount DeleteFileW GetFileAttributesW WaitForSingleObject SetEvent CreateEventW CreateFileA CloseHandle GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA CompareStringW HeapSize FlushFileBuffers ReadFile SetFilePointer GetStartupInfoA GetFileType GetStdHandle SetHandleCount HeapReAlloc VirtualAlloc VirtualFree HeapCreate GetStringTypeA IsValidLocale InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection ExitThread GetCurrentThreadId CreateThread GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetStartupInfoW RaiseException RtlUnwind LCMapStringA LCMapStringW GetStringTypeW GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError ExitProcess GetTimeZoneInformation HeapAlloc WriteFile GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA SetEnvironmentVariableA

user32

LoadIconW LoadCursorW LoadStringW RegisterClassExW PostQuitMessage EndPaint BeginPaint DefWindowProcW DestroyWindow

advapi32

RegSetValueExW RegQueryValueExW RegCloseKey RegOpenKeyExW

shell32

SHCreateDirectoryExW

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime VarUdateFromDate

wininet

InternetCrackUrlW HttpQueryInfoW InternetSetStatusCallbackW InternetCloseHandle InternetGetConnectedState InternetOpenW InternetConnectW HttpOpenRequestW HttpSendRequestW InternetReadFile

Sharing

General

Malware Config

Signatures

File Explorer

84cd6aa3c186f4ccb1a62d854aef4edd_JaffaCakes118

PE Signature issue

kernel32

user32

advapi32

shell32

oleaut32

wininet

generic