e202b6d424f6d0a58b74b7eb3a71653d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
e202b6d424f6d0a58b74b7eb3a71653d_JaffaCakes118
Size 1.8MB
Sample240915-jmw49atbpr
SHA256 6c63c5d6c9a23a169eaa79e96c11fc62d685f2f572c602b1bca42376225cec6d
MD5 e202b6d424f6d0a58b74b7eb3a71653d
SHA1 f6ff3c60c3f00fe0b7f92ebbe9922df85e7bf489
SHA512 867d27dd97edc7f8578e52ccefd05ecf00c67cd6e3dfdba5934538db53d789128c715d17dd7e7bf6a3115fd94ee92202058a905b0f958213bdeb9f79f53659e6
SSDEEP 49152:qoWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1MLqz:4rHMSUECiizkYARBlE0HQua
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e202b6d424f6d0a58b74b7eb3a71653d_JaffaCakes118

.exe 1.8MB

e202b6d424f6d0a58b74b7eb3a71653d_JaffaCakes118

IMPHASH 1ab49b43a8b347cf8b4a01b6b2ce253f
SHA256 6c63c5d6c9a23a169eaa79e96c11fc62d685f2f572c602b1bca42376225cec6d
MD5 e202b6d424f6d0a58b74b7eb3a71653d
SHA1 f6ff3c60c3f00fe0b7f92ebbe9922df85e7bf489
SHA512 867d27dd97edc7f8578e52ccefd05ecf00c67cd6e3dfdba5934538db53d789128c715d17dd7e7bf6a3115fd94ee92202058a905b0f958213bdeb9f79f53659e6
SSDEEP 49152:qoWrHHJeSUtbtMCiwwxi53lkH4R7+RiiKUE0HcL1MLqz:4rHMSUECiizkYARBlE0HQua
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ec:13:6e:53:4d:9a:b0:ef:76:d8:44:b4:ab:0d:25:b0:69:0c:cf:1a

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=GHDUIYANHFBFQSCULK

Chains

Sep 7, 2024

Minor OS version

Major OS version

Entry point

1783088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetModuleHandleA ExitProcess SetErrorMode GetLastError

user32

CreatePopupMenu DispatchMessageW LoadIconW LoadCursorW RemovePropW SetWindowPlacement IsZoomed GetWindowPlacement IsIconic SetPropW GetPropW ShowWindow SetForegroundWindow GetForegroundWindow ShowOwnedPopups PostMessageW SetTimer MoveWindow MapWindowPoints GetWindowRect PtInRect GetWindowLongW GetAncestor EnumChildWindows UpdateLayeredWindow SetActiveWindow DestroyMenu KillTimer GetCursorPos EnableWindow GetDlgItem SetRect GetClassNameW GetClientRect GetWindowTextW SetWindowTextW SendMessageW WindowFromPoint GetAsyncKeyState DialogBoxParamW RedrawWindow BringWindowToTop GetTopWindow MessageBoxW RegisterHotKey UnregisterHotKey EndDialog DefWindowProcW IsWindow GetWindowThreadProcessId TrackPopupMenu CheckMenuItem EnableMenuItem AppendMenuW ReleaseCapture SetCapture SetWindowLongW UnhookWindowsHookEx DestroyWindow RegisterShellHookWindow SetWindowsHookExW PostQuitMessage RegisterClipboardFormatW CreateWindowExW RegisterWindowMessageW GetDC ReleaseDC GetWindowRgn GetDesktopWindow GetIconInfo LookupIconIdFromDirectoryEx DestroyIcon CreateIconFromResourceEx FindWindowW SystemParametersInfoW EnumWindows GetWindow GetParent SendDlgItemMessageW IsWindowVisible TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW LoadImageW GetSystemMetrics EnumDisplayMonitors SetWindowPos RegisterClassExW LoadIconA CharUpperA

gdi32

StretchDIBits StretchBlt SetViewportOrgEx SetTextColor SetStretchBltMode SetBkMode SetBkColor SelectPalette SelectObject SelectClipRgn SaveDC RestoreDC ResizePalette RealizePalette IntersectClipRect GetViewportOrgEx GetTextMetricsW GetStockObject GetPaletteEntries GetObjectType GetObjectW GetNearestPaletteIndex GetDeviceCaps GetDIBits GetCurrentObject GetClipBox ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePalette CreateHalftonePalette CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap BitBlt

advapi32

RegQueryValueExW RegCreateKeyW RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteValueW SetSecurityDescriptorSacl GetSecurityDescriptorSacl ConvertStringSecurityDescriptorToSecurityDescriptorW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegOpenKeyExA RegQueryValueExA

shell32

ShellExecuteW SHGetSpecialFolderPathW ord680

comctl32

_TrackMouseEvent

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata14

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata13

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata12

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata11

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata10

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata9

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata8

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e202b6d424f6d0a58b74b7eb3a71653d_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

advapi32

shell32

comctl32

generic