cac8b8f1f75f306da0be59662259e1aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
cac8b8f1f75f306da0be59662259e1aa_JaffaCakes118
Size 398KB
Sample240830-n2gekasfkh
SHA256 777fc438fbf3d1fc10a866f90f40182dcbea7ddcef23988f202bb0ae13c2d447
MD5 cac8b8f1f75f306da0be59662259e1aa
SHA1 ab63bc40c6983217e202543ff21d4aca6a7c8b9a
SHA512 83937dd2738ff7e9f505dd46024bc8f5742c2998105fdfa71828f4329365abef054a294aae28fa311d34fb2eb05b86d13f646f2e5418cddf6036ac22654b5546
SSDEEP 6144:59ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+A:f2wr03pdf8vhhOKJET8Byq+A
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cac8b8f1f75f306da0be59662259e1aa_JaffaCakes118

.dll 398KB

cac8b8f1f75f306da0be59662259e1aa_JaffaCakes118

IMPHASH c0d4a888925cfdc2acf94edd6c75208f
SHA256 777fc438fbf3d1fc10a866f90f40182dcbea7ddcef23988f202bb0ae13c2d447
MD5 cac8b8f1f75f306da0be59662259e1aa
SHA1 ab63bc40c6983217e202543ff21d4aca6a7c8b9a
SHA512 83937dd2738ff7e9f505dd46024bc8f5742c2998105fdfa71828f4329365abef054a294aae28fa311d34fb2eb05b86d13f646f2e5418cddf6036ac22654b5546
SSDEEP 6144:59ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+A:f2wr03pdf8vhhOKJET8Byq+A
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

27:b3:d8:90:43:85:6a:c5:37:91:92:ee:bd:56:43:b5:04:b7:ba:dd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=RotA Games ApS,O=RotA Games ApS,POSTALCODE=9000,STREET=Ved Stranden 9B,L=Aalborg,C=DK

Chains

Aug 22, 2024

Minor OS version

Major OS version

Entry point

18590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA VirtualAlloc VirtualProtect GetProcAddress GetLastError GetCurrentThreadId lstrcmpA CreateTimerQueue FatalAppExitW SystemTimeToFileTime GetConsoleAliasExesW GlobalAddAtomW GetShortPathNameA DebugActiveProcessStop ExpandEnvironmentStringsA

user32

GetCursorInfo GetWindowThreadProcessId GetKeyboardType GetGUIThreadInfo GetWindowDC GetCursorPos SetRectEmpty AllowForegroundActivation DlgDirSelectComboBoxExW GetKeyboardLayoutList DrawTextExA DdeEnableCallback

winspool.drv

DeviceCapabilities SetPrinterDataA SetPrinterDataW GetJobW AdvancedDocumentPropertiesA SpoolerPrinterEvent StartPagePrinter ClosePrinter DeletePrinterDataExA ConfigurePortW PrinterMessageBoxA CreatePrinterIC OpenPrinterW DeleteFormA

oledlg

OleUIUpdateLinksW OleUIChangeIconW OleUIInsertObjectA OleUIBusyA OleUIChangeSourceA OleUIInsertObjectW OleUIAddVerbMenuA

oleaut32

VarDateFromCy VarR8FromUI1 SafeArrayCreateEx BSTR_UserFree VarImp CreateTypeLib VarI4FromUI4 VarR8FromStr VarUI1FromI8

advapi32

SaferSetLevelInformation ConvertAccessToSecurityDescriptorW InitializeSid EncryptedFileKeyInfo ComputeAccessTokenFromCodeAuthzLevel LookupPrivilegeValueW AccessCheckByTypeResultListAndAuditAlarmA

gdi32

DdEntry40 GdiGetSpoolFileHandle AddFontResourceExA SetLayout EnumEnhMetaFile SetPixelV GetTextExtentExPointW EnumFontFamiliesA GetObjectType GdiIsPlayMetafileDC SetDCPenColor

winmm

timeGetSystemTime waveInReset midiOutGetNumDevs mixerGetDevCapsA waveOutPrepareHeader waveOutGetVolume mmioSeek mmioRenameA

shell32

SHGetFolderPathAndSubDirA DuplicateIcon OpenAs_RunDLLW PrintersGetCommand_RunDLLW ILFindLastID SHGetFileInfo SHCLSIDFromString DAD_DragEnterEx StrChrA SHAppBarMessage SheChangeDirExW SHCreateDirectory PickIconDlg DAD_SetDragImage

comctl32

CreateStatusWindow GetEffectiveClientRect ImageList_DragEnter ImageList_Draw CreateStatusWindowW AddMRUStringW _TrackMouseEvent CreateMRUListW

comdlg32

PrintDlgExA ChooseFontA GetOpenFileNameA FindTextW ChooseFontW GetSaveFileNameW FindTextA GetFileTitleA

shlwapi

PathGetArgsA PathUnExpandEnvStringsA wvnsprintfW UrlCombineW PathAddExtensionA PathIsUNCServerW PathIsSystemFolderA PathMakeSystemFolderA

oleacc

DllGetClassObject AccessibleObjectFromEvent ObjectFromLresult GetStateTextA DllRegisterServer CreateStdAccessibleProxyA

Sharing

General

Malware Config

Signatures

File Explorer

cac8b8f1f75f306da0be59662259e1aa_JaffaCakes118

PE Signature issue

kernel32

user32

winspool.drv

oledlg

oleaut32

advapi32

gdi32

winmm

shell32

comctl32

comdlg32

shlwapi

oleacc

generic