c33bdeb366add979da8358ebfdfb6aa2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
c33bdeb366add979da8358ebfdfb6aa2_JaffaCakes118
Size 323KB
Sample240826-sclefazdka
SHA256 ea6e22b9a982aa171355c84fb43df42a314672c60315ee676b1289f1377968be
MD5 c33bdeb366add979da8358ebfdfb6aa2
SHA1 914416480c1e7e6ecbff4fee73714358f2017ce4
SHA512 b6346e2086e9581cc6e1c3298c699b6f9d99264453881c66f36f5621f94776fa42b51adc6b908e8de3c3c63874741e84b15a811266c376104213904628d10eb0
SSDEEP 6144:r4jKO3myYc9LKd15qYZZCSXvpaf3f5xmoEBjzMolaiTrm/k3:rpO3myYc9KpdCSBafPngC/k3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

c33bdeb366add979da8358ebfdfb6aa2_JaffaCakes118

.exe 323KB

c33bdeb366add979da8358ebfdfb6aa2_JaffaCakes118

IMPHASH ab4bee443b418ea6a1fb012530f5226a
SHA256 ea6e22b9a982aa171355c84fb43df42a314672c60315ee676b1289f1377968be
MD5 c33bdeb366add979da8358ebfdfb6aa2
SHA1 914416480c1e7e6ecbff4fee73714358f2017ce4
SHA512 b6346e2086e9581cc6e1c3298c699b6f9d99264453881c66f36f5621f94776fa42b51adc6b908e8de3c3c63874741e84b15a811266c376104213904628d10eb0
SSDEEP 6144:r4jKO3myYc9LKd15qYZZCSXvpaf3f5xmoEBjzMolaiTrm/k3:rpO3myYc9KpdCSBafPngC/k3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

6c:a7:79:7f:ed:5e:0b:33:6d:19:eb:db:0a:0c:91:94:d8:e6:a4:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=0000641418,CN=ARTBUD RADOM SP Z O O,O=ARTBUD RADOM SP Z O O,L=Radom,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Chains

Aug 22, 2024

Minor OS version

Major OS version

Entry point

14556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SizeofResource GetModuleHandleW GetProcAddress LoadLibraryW CreateThread FormatMessageW LocalFree LoadResource GetSystemTimeAsFileTime GetCurrentProcessId FindResourceA GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoW Sleep GetLastError GetCurrentThreadId GetFullPathNameW

user32

SendMessageW ShowWindow LoadStringW LoadAcceleratorsW MessageBoxA PostMessageW EndPaint BeginPaint DefWindowProcW PostQuitMessage GetDlgItem GetWindowRect SetWindowPos CreateDialogParamW SetWindowTextW MessageBoxW GetWindowTextW DestroyWindow UpdateWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW IsDialogMessageW GetMessageW

gdi32

CreateSolidBrush

comdlg32

GetOpenFileNameW

ole32

CoUninitialize StringFromGUID2 CoGetObject CoCreateInstance CoInitializeEx

oleaut32

SysFreeString SysAllocString

msvcr90

__dllonexit _unlock ?terminate@@YAXXZ __crt_debugger_hook __set_app_type _encode_pointer _fmode _commode __setusermatherr _onexit _decode_pointer memset _lock _configthreadlocale _initterm_e _initterm _wcmdln exit memcpy _cexit _exit _XcptFilter _vsnwprintf malloc free ??3@YAXPEAX@Z ??2@YAPEAX_K@Z atoi _amsg_exit __wgetmainargs __C_specific_handler

Sharing

General

Malware Config

Signatures

File Explorer

c33bdeb366add979da8358ebfdfb6aa2_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

msvcr90

generic