d9974a53b5b15ae5f55b19ae4f41f317_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
d9974a53b5b15ae5f55b19ae4f41f317_JaffaCakes118
Size 398KB
Sample240911-etpljashme
SHA256 44c4263ac5e42d2498e46202233d172cb1fb65c4fa5c951eb8d20da40c84494b
MD5 d9974a53b5b15ae5f55b19ae4f41f317
SHA1 5178c4453542d00b878e99b1ac0d667ae8265c2d
SHA512 6b14242f28d3cd2b7d6097316fdccafd60a00b414c292f75b27777f2453b1a14e9d9050f53c2dbadc028cf0b743886dff73d37764e44e18a7f9c44b3fbc09424
SSDEEP 6144:B9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+K:32wr03pdf8vhhOKJET8Byq+K
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d9974a53b5b15ae5f55b19ae4f41f317_JaffaCakes118

.dll 398KB

d9974a53b5b15ae5f55b19ae4f41f317_JaffaCakes118

IMPHASH c0d4a888925cfdc2acf94edd6c75208f
SHA256 44c4263ac5e42d2498e46202233d172cb1fb65c4fa5c951eb8d20da40c84494b
MD5 d9974a53b5b15ae5f55b19ae4f41f317
SHA1 5178c4453542d00b878e99b1ac0d667ae8265c2d
SHA512 6b14242f28d3cd2b7d6097316fdccafd60a00b414c292f75b27777f2453b1a14e9d9050f53c2dbadc028cf0b743886dff73d37764e44e18a7f9c44b3fbc09424
SSDEEP 6144:B9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+K:32wr03pdf8vhhOKJET8Byq+K
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

5e:5a:f1:78:4f:3b:2c:d2:9c:97:90:ae:b2:58:1d:db:ca:be:b7:94

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=RotA Games ApS,O=RotA Games ApS,POSTALCODE=9000,STREET=Ved Stranden 9B,L=Aalborg,C=DK

Chains

Sep 6, 2024

Minor OS version

Major OS version

Entry point

18590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA VirtualAlloc VirtualProtect GetProcAddress GetLastError GetCurrentThreadId lstrcmpA CreateTimerQueue FatalAppExitW SystemTimeToFileTime GetConsoleAliasExesW GlobalAddAtomW GetShortPathNameA DebugActiveProcessStop ExpandEnvironmentStringsA

user32

GetCursorInfo GetWindowThreadProcessId GetKeyboardType GetGUIThreadInfo GetWindowDC GetCursorPos SetRectEmpty AllowForegroundActivation DlgDirSelectComboBoxExW GetKeyboardLayoutList DrawTextExA DdeEnableCallback

winspool.drv

DeviceCapabilities SetPrinterDataA SetPrinterDataW GetJobW AdvancedDocumentPropertiesA SpoolerPrinterEvent StartPagePrinter ClosePrinter DeletePrinterDataExA ConfigurePortW PrinterMessageBoxA CreatePrinterIC OpenPrinterW DeleteFormA

oledlg

OleUIUpdateLinksW OleUIChangeIconW OleUIInsertObjectA OleUIBusyA OleUIChangeSourceA OleUIInsertObjectW OleUIAddVerbMenuA

oleaut32

VarDateFromCy VarR8FromUI1 SafeArrayCreateEx BSTR_UserFree VarImp CreateTypeLib VarI4FromUI4 VarR8FromStr VarUI1FromI8

advapi32

SaferSetLevelInformation ConvertAccessToSecurityDescriptorW InitializeSid EncryptedFileKeyInfo ComputeAccessTokenFromCodeAuthzLevel LookupPrivilegeValueW AccessCheckByTypeResultListAndAuditAlarmA

gdi32

DdEntry40 GdiGetSpoolFileHandle AddFontResourceExA SetLayout EnumEnhMetaFile SetPixelV GetTextExtentExPointW EnumFontFamiliesA GetObjectType GdiIsPlayMetafileDC SetDCPenColor

winmm

timeGetSystemTime waveInReset midiOutGetNumDevs mixerGetDevCapsA waveOutPrepareHeader waveOutGetVolume mmioSeek mmioRenameA

shell32

SHGetFolderPathAndSubDirA DuplicateIcon OpenAs_RunDLLW PrintersGetCommand_RunDLLW ILFindLastID SHGetFileInfo SHCLSIDFromString DAD_DragEnterEx StrChrA SHAppBarMessage SheChangeDirExW SHCreateDirectory PickIconDlg DAD_SetDragImage

comctl32

CreateStatusWindow GetEffectiveClientRect ImageList_DragEnter ImageList_Draw CreateStatusWindowW AddMRUStringW _TrackMouseEvent CreateMRUListW

comdlg32

PrintDlgExA ChooseFontA GetOpenFileNameA FindTextW ChooseFontW GetSaveFileNameW FindTextA GetFileTitleA

shlwapi

PathGetArgsA PathUnExpandEnvStringsA wvnsprintfW UrlCombineW PathAddExtensionA PathIsUNCServerW PathIsSystemFolderA PathMakeSystemFolderA

oleacc

DllGetClassObject AccessibleObjectFromEvent ObjectFromLresult GetStateTextA DllRegisterServer CreateStdAccessibleProxyA

Sharing

General

Malware Config

Signatures

File Explorer

d9974a53b5b15ae5f55b19ae4f41f317_JaffaCakes118

PE Signature issue

kernel32

user32

winspool.drv

oledlg

oleaut32

advapi32

gdi32

winmm

shell32

comctl32

comdlg32

shlwapi

oleacc

generic