a5442c2ed59bd1a603eae8e1305c87db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5442c2ed59bd1a603eae8e1305c87db_JaffaCakes118
Size 398KB
Sample240818-eb6r4atdnd
SHA256 ae73ce9c760a902a7af4548f277a9c24bc0ad4418b6c03d34d0f7407e1b436d2
MD5 a5442c2ed59bd1a603eae8e1305c87db
SHA1 caa7241057e0ec0d3e24881bbd46ef463e40a379
SHA512 82333e470e73441ce6e902f82d193aca62893153986aebbe7320a35228c0947c61f2148dd0579be32cd39be3630fe879b2bfd7ee985c1c75bba05d6c23068708
SSDEEP 6144:V9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+N:j2wr03pdf8vhhOKJET8Byq+N
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a5442c2ed59bd1a603eae8e1305c87db_JaffaCakes118

.dll 398KB

a5442c2ed59bd1a603eae8e1305c87db_JaffaCakes118

IMPHASH c0d4a888925cfdc2acf94edd6c75208f
SHA256 ae73ce9c760a902a7af4548f277a9c24bc0ad4418b6c03d34d0f7407e1b436d2
MD5 a5442c2ed59bd1a603eae8e1305c87db
SHA1 caa7241057e0ec0d3e24881bbd46ef463e40a379
SHA512 82333e470e73441ce6e902f82d193aca62893153986aebbe7320a35228c0947c61f2148dd0579be32cd39be3630fe879b2bfd7ee985c1c75bba05d6c23068708
SSDEEP 6144:V9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+N:j2wr03pdf8vhhOKJET8Byq+N
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:b0:56:a3:d8:af:ca:b9:03:b3:e4:0a:b7:c8:ad:3c:e5:a6:70:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=RotA Games ApS,O=RotA Games ApS,POSTALCODE=9000,STREET=Ved Stranden 9B,L=Aalborg,C=DK

Chains

Aug 14, 2024

Minor OS version

Major OS version

Entry point

18590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA VirtualAlloc VirtualProtect GetProcAddress GetLastError GetCurrentThreadId lstrcmpA CreateTimerQueue FatalAppExitW SystemTimeToFileTime GetConsoleAliasExesW GlobalAddAtomW GetShortPathNameA DebugActiveProcessStop ExpandEnvironmentStringsA

user32

GetCursorInfo GetWindowThreadProcessId GetKeyboardType GetGUIThreadInfo GetWindowDC GetCursorPos SetRectEmpty AllowForegroundActivation DlgDirSelectComboBoxExW GetKeyboardLayoutList DrawTextExA DdeEnableCallback

winspool.drv

DeviceCapabilities SetPrinterDataA SetPrinterDataW GetJobW AdvancedDocumentPropertiesA SpoolerPrinterEvent StartPagePrinter ClosePrinter DeletePrinterDataExA ConfigurePortW PrinterMessageBoxA CreatePrinterIC OpenPrinterW DeleteFormA

oledlg

OleUIUpdateLinksW OleUIChangeIconW OleUIInsertObjectA OleUIBusyA OleUIChangeSourceA OleUIInsertObjectW OleUIAddVerbMenuA

oleaut32

VarDateFromCy VarR8FromUI1 SafeArrayCreateEx BSTR_UserFree VarImp CreateTypeLib VarI4FromUI4 VarR8FromStr VarUI1FromI8

advapi32

SaferSetLevelInformation ConvertAccessToSecurityDescriptorW InitializeSid EncryptedFileKeyInfo ComputeAccessTokenFromCodeAuthzLevel LookupPrivilegeValueW AccessCheckByTypeResultListAndAuditAlarmA

gdi32

DdEntry40 GdiGetSpoolFileHandle AddFontResourceExA SetLayout EnumEnhMetaFile SetPixelV GetTextExtentExPointW EnumFontFamiliesA GetObjectType GdiIsPlayMetafileDC SetDCPenColor

winmm

timeGetSystemTime waveInReset midiOutGetNumDevs mixerGetDevCapsA waveOutPrepareHeader waveOutGetVolume mmioSeek mmioRenameA

shell32

SHGetFolderPathAndSubDirA DuplicateIcon OpenAs_RunDLLW PrintersGetCommand_RunDLLW ILFindLastID SHGetFileInfo SHCLSIDFromString DAD_DragEnterEx StrChrA SHAppBarMessage SheChangeDirExW SHCreateDirectory PickIconDlg DAD_SetDragImage

comctl32

CreateStatusWindow GetEffectiveClientRect ImageList_DragEnter ImageList_Draw CreateStatusWindowW AddMRUStringW _TrackMouseEvent CreateMRUListW

comdlg32

PrintDlgExA ChooseFontA GetOpenFileNameA FindTextW ChooseFontW GetSaveFileNameW FindTextA GetFileTitleA

shlwapi

PathGetArgsA PathUnExpandEnvStringsA wvnsprintfW UrlCombineW PathAddExtensionA PathIsUNCServerW PathIsSystemFolderA PathMakeSystemFolderA

oleacc

DllGetClassObject AccessibleObjectFromEvent ObjectFromLresult GetStateTextA DllRegisterServer CreateStdAccessibleProxyA

Sharing

General

Malware Config

Signatures

File Explorer

a5442c2ed59bd1a603eae8e1305c87db_JaffaCakes118

PE Signature issue

kernel32

user32

winspool.drv

oledlg

oleaut32

advapi32

gdi32

winmm

shell32

comctl32

comdlg32

shlwapi

oleacc

generic