f447d7a2f7cfb24db6b3c42716b16457_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
f447d7a2f7cfb24db6b3c42716b16457_JaffaCakes118
Size 239KB
Sample240924-xdsblascmd
SHA256 67c08d2a21a3ade47ed790aa65ef7cbb117e32300b432f5be97d5ff13c745247
MD5 f447d7a2f7cfb24db6b3c42716b16457
SHA1 6c898d8bc1b2311859b34df36e0ba9c392a30b9f
SHA512 b303f0d106ce5fadda89346e78516ca8251dd532f1efa2540085b665d9de6dbba03c77bdc7007294a893f62a5e1fe22790513b97261eb6ba4eed1aac4d870e1a
SSDEEP 6144:BVNqZlMVBQ9Z8sugUnQsIqrQNIlK3cMCjq:tqZlMbQHugUQsI3NK0cMCjq
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f447d7a2f7cfb24db6b3c42716b16457_JaffaCakes118

.exe 239KB

f447d7a2f7cfb24db6b3c42716b16457_JaffaCakes118

IMPHASH 6f5b50f25b74a105a4706439e0b82cdf
SHA256 67c08d2a21a3ade47ed790aa65ef7cbb117e32300b432f5be97d5ff13c745247
MD5 f447d7a2f7cfb24db6b3c42716b16457
SHA1 6c898d8bc1b2311859b34df36e0ba9c392a30b9f
SHA512 b303f0d106ce5fadda89346e78516ca8251dd532f1efa2540085b665d9de6dbba03c77bdc7007294a893f62a5e1fe22790513b97261eb6ba4eed1aac4d870e1a
SSDEEP 6144:BVNqZlMVBQ9Z8sugUnQsIqrQNIlK3cMCjq:tqZlMbQHugUQsI3NK0cMCjq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

2b:84:e1:84:5a:f5:d0:d7:26:44:24:81:51:df:72:60:24:27:c8:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=0000783996,CN=NEEDCODE SP Z O O,O=NEEDCODE SP Z O O,L=KRAKÓW,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Chains

Sep 23, 2024

Minor OS version

Major OS version

Entry point

24433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Izidu\Desktop\2019\WindowsSDK7-Samples-master\WindowsSDK7-Samples-master\tabletpc\TipAutoComplete\Release\TIPAutoCompleteSDKSample.pdb

kernel32

FlushFileBuffers HeapReAlloc HeapSize CloseHandle CreateFileW GetProcessHeap LCMapStringW GetConsoleOutputCP ReadFile GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetConsoleMode SetFilePointerEx SetEndOfFile ReadConsoleW WriteConsoleW ExitProcess MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP FreeConsole VirtualAlloc lstrlenW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetFileType HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP DecodePointer

user32

GetWindowTextW InvalidateRect DialogBoxParamW CheckDlgButton GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW GetWindowRect GetFocus DestroyWindow SetWindowPos GetPropW CreateWindowExW SendMessageW EndDialog RemovePropW SetWindowTextW ShowWindow RegisterClassW GetSysColor MoveWindow IsDlgButtonChecked SetPropW LoadCursorW SetWindowLongW GetDlgItem

gdi32

SetTextColor SetBkColor ExtTextOutW GetTextExtentPointW

advapi32

CryptAcquireContextA RegGetValueW

ole32

CoCreateInstance CLSIDFromString CoInitializeEx CoUninitialize

comctl32

ord413 ord410 ord412

Sharing

General

Malware Config

Signatures

File Explorer

f447d7a2f7cfb24db6b3c42716b16457_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

comctl32

generic