cf2b81c824f5927d1ff64888d92c3c58_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
cf2b81c824f5927d1ff64888d92c3c58_JaffaCakes118
Size 398KB
Sample240906-kxp95axemj
SHA256 3ea5e97103739a7170ce72b9b0b1f046fafbdbe3e7c1faa54842d3f8f9a855c2
MD5 cf2b81c824f5927d1ff64888d92c3c58
SHA1 2e6415d1721abafdcf5cb56254cdc196e30c5006
SHA512 9ba506746ed8fb4d6288ce539eb1a10b24044327294a467cff16c52fa4487c61bef673c4691e1e9fc03022ea7a7c79bc0b0d7a04432a575b01121f05bcd6e1f4
SSDEEP 6144:V9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+c:j2wr03pdf8vhhOKJET8Byq+c
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cf2b81c824f5927d1ff64888d92c3c58_JaffaCakes118

.dll 398KB

cf2b81c824f5927d1ff64888d92c3c58_JaffaCakes118

IMPHASH c0d4a888925cfdc2acf94edd6c75208f
SHA256 3ea5e97103739a7170ce72b9b0b1f046fafbdbe3e7c1faa54842d3f8f9a855c2
MD5 cf2b81c824f5927d1ff64888d92c3c58
SHA1 2e6415d1721abafdcf5cb56254cdc196e30c5006
SHA512 9ba506746ed8fb4d6288ce539eb1a10b24044327294a467cff16c52fa4487c61bef673c4691e1e9fc03022ea7a7c79bc0b0d7a04432a575b01121f05bcd6e1f4
SSDEEP 6144:V9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+c:j2wr03pdf8vhhOKJET8Byq+c
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

0a:4f:a3:8f:a3:82:90:5f:0b:09:cd:99:48:e8:ab:8c:9e:0a:b8:80

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=RotA Games ApS,O=RotA Games ApS,POSTALCODE=9000,STREET=Ved Stranden 9B,L=Aalborg,C=DK

Chains

Sep 4, 2024

Minor OS version

Major OS version

Entry point

18590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA VirtualAlloc VirtualProtect GetProcAddress GetLastError GetCurrentThreadId lstrcmpA CreateTimerQueue FatalAppExitW SystemTimeToFileTime GetConsoleAliasExesW GlobalAddAtomW GetShortPathNameA DebugActiveProcessStop ExpandEnvironmentStringsA

user32

GetCursorInfo GetWindowThreadProcessId GetKeyboardType GetGUIThreadInfo GetWindowDC GetCursorPos SetRectEmpty AllowForegroundActivation DlgDirSelectComboBoxExW GetKeyboardLayoutList DrawTextExA DdeEnableCallback

winspool.drv

DeviceCapabilities SetPrinterDataA SetPrinterDataW GetJobW AdvancedDocumentPropertiesA SpoolerPrinterEvent StartPagePrinter ClosePrinter DeletePrinterDataExA ConfigurePortW PrinterMessageBoxA CreatePrinterIC OpenPrinterW DeleteFormA

oledlg

OleUIUpdateLinksW OleUIChangeIconW OleUIInsertObjectA OleUIBusyA OleUIChangeSourceA OleUIInsertObjectW OleUIAddVerbMenuA

oleaut32

VarDateFromCy VarR8FromUI1 SafeArrayCreateEx BSTR_UserFree VarImp CreateTypeLib VarI4FromUI4 VarR8FromStr VarUI1FromI8

advapi32

SaferSetLevelInformation ConvertAccessToSecurityDescriptorW InitializeSid EncryptedFileKeyInfo ComputeAccessTokenFromCodeAuthzLevel LookupPrivilegeValueW AccessCheckByTypeResultListAndAuditAlarmA

gdi32

DdEntry40 GdiGetSpoolFileHandle AddFontResourceExA SetLayout EnumEnhMetaFile SetPixelV GetTextExtentExPointW EnumFontFamiliesA GetObjectType GdiIsPlayMetafileDC SetDCPenColor

winmm

timeGetSystemTime waveInReset midiOutGetNumDevs mixerGetDevCapsA waveOutPrepareHeader waveOutGetVolume mmioSeek mmioRenameA

shell32

SHGetFolderPathAndSubDirA DuplicateIcon OpenAs_RunDLLW PrintersGetCommand_RunDLLW ILFindLastID SHGetFileInfo SHCLSIDFromString DAD_DragEnterEx StrChrA SHAppBarMessage SheChangeDirExW SHCreateDirectory PickIconDlg DAD_SetDragImage

comctl32

CreateStatusWindow GetEffectiveClientRect ImageList_DragEnter ImageList_Draw CreateStatusWindowW AddMRUStringW _TrackMouseEvent CreateMRUListW

comdlg32

PrintDlgExA ChooseFontA GetOpenFileNameA FindTextW ChooseFontW GetSaveFileNameW FindTextA GetFileTitleA

shlwapi

PathGetArgsA PathUnExpandEnvStringsA wvnsprintfW UrlCombineW PathAddExtensionA PathIsUNCServerW PathIsSystemFolderA PathMakeSystemFolderA

oleacc

DllGetClassObject AccessibleObjectFromEvent ObjectFromLresult GetStateTextA DllRegisterServer CreateStdAccessibleProxyA

Sharing

General

Malware Config

Signatures

File Explorer

cf2b81c824f5927d1ff64888d92c3c58_JaffaCakes118

PE Signature issue

kernel32

user32

winspool.drv

oledlg

oleaut32

advapi32

gdi32

winmm

shell32

comctl32

comdlg32

shlwapi

oleacc

generic