fa0322fb70610d6e67585588184eda39_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
fa0322fb70610d6e67585588184eda39_JaffaCakes118
Size 239KB
Sample240927-jqbbysvfpg
SHA256 3d994a2f80a63f31bf56ddded5ed35f020c40c0324b3ab1935e08b15c25ba017
MD5 fa0322fb70610d6e67585588184eda39
SHA1 7bf793587550abbc8a39d5cb26b1328483b17820
SHA512 6615bd7060022ab8e6e36160955f1e09d6800dbe509b85aafb738f890c54c1568cbbfbd77451a55bdefc42dd2c1ad899d78ef4022a8cdcfadcd2d1b3f0baa56b
SSDEEP 6144:jh0jAkZaisNF2VZkltu4U6QsJFe88CGSzyTLNje:qckZaHD2stu4UfsJiCGSzuNje
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fa0322fb70610d6e67585588184eda39_JaffaCakes118

.exe 239KB

fa0322fb70610d6e67585588184eda39_JaffaCakes118

IMPHASH 6f5b50f25b74a105a4706439e0b82cdf
SHA256 3d994a2f80a63f31bf56ddded5ed35f020c40c0324b3ab1935e08b15c25ba017
MD5 fa0322fb70610d6e67585588184eda39
SHA1 7bf793587550abbc8a39d5cb26b1328483b17820
SHA512 6615bd7060022ab8e6e36160955f1e09d6800dbe509b85aafb738f890c54c1568cbbfbd77451a55bdefc42dd2c1ad899d78ef4022a8cdcfadcd2d1b3f0baa56b
SSDEEP 6144:jh0jAkZaisNF2VZkltu4U6QsJFe88CGSzyTLNje:qckZaHD2stu4UfsJiCGSzuNje
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

29:87:c1:95:af:0a:47:48:06:f0:43:f2:9a:15:5d:d5:4c:3d:bd:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=0000783996,CN=NEEDCODE SP Z O O,O=NEEDCODE SP Z O O,L=KRAKÓW,C=PL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302504c

Chains

Sep 26, 2024

Minor OS version

Major OS version

Entry point

24433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Izidu\Desktop\2019\WindowsSDK7-Samples-master\WindowsSDK7-Samples-master\tabletpc\TipAutoComplete\Release\TIPAutoCompleteSDKSample.pdb

kernel32

FlushFileBuffers HeapReAlloc HeapSize CloseHandle CreateFileW GetProcessHeap LCMapStringW GetConsoleOutputCP ReadFile GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetConsoleMode SetFilePointerEx SetEndOfFile ReadConsoleW WriteConsoleW ExitProcess MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP FreeConsole VirtualAlloc lstrlenW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetFileType HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP DecodePointer

user32

GetWindowTextW InvalidateRect DialogBoxParamW CheckDlgButton GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW GetWindowRect GetFocus DestroyWindow SetWindowPos GetPropW CreateWindowExW SendMessageW EndDialog RemovePropW SetWindowTextW ShowWindow RegisterClassW GetSysColor MoveWindow IsDlgButtonChecked SetPropW LoadCursorW SetWindowLongW GetDlgItem

gdi32

SetTextColor SetBkColor ExtTextOutW GetTextExtentPointW

advapi32

CryptAcquireContextA RegGetValueW

ole32

CoCreateInstance CLSIDFromString CoInitializeEx CoUninitialize

comctl32

ord413 ord410 ord412

Sharing

General

Malware Config

Signatures

File Explorer

fa0322fb70610d6e67585588184eda39_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

comctl32

generic