590888b47a97fece6315dc056b75bcb4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
590888b47a97fece6315dc056b75bcb4_JaffaCakes118
Size 131KB
Sample241018-xv81nstdmc
SHA256 2be8c28bc0dc8fdee1f8bd2d9a69cf378ecbebbf240fa584cf7067f246e27e9d
MD5 590888b47a97fece6315dc056b75bcb4
SHA1 7bb41b4519d187dd83b00529f9b683793aab40a3
SHA512 a6514a56dcc2d0d51e629310bf9350b319bda8b79925f0f4e2113436cd2d3a69b22ed5abbc34405adc935240aadd8d571740cc61fae5fef830c32ca36322eacc
SSDEEP 3072:YGG209s6bisLSf7C5Py6vHWTn6yPppppZppppppppppQppppppppZppppppppppS:my6LSe5P9v2TnJPppppZppppppppppQs
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

590888b47a97fece6315dc056b75bcb4_JaffaCakes118

.exe 131KB

590888b47a97fece6315dc056b75bcb4_JaffaCakes118

IMPHASH 2406db6e3a77ee7f01c7c3012ea01705
SHA256 2be8c28bc0dc8fdee1f8bd2d9a69cf378ecbebbf240fa584cf7067f246e27e9d
MD5 590888b47a97fece6315dc056b75bcb4
SHA1 7bb41b4519d187dd83b00529f9b683793aab40a3
SHA512 a6514a56dcc2d0d51e629310bf9350b319bda8b79925f0f4e2113436cd2d3a69b22ed5abbc34405adc935240aadd8d571740cc61fae5fef830c32ca36322eacc
SSDEEP 3072:YGG209s6bisLSf7C5Py6vHWTn6yPppppZppppppppppQppppppppZppppppppppS:my6LSe5P9v2TnJPppppZppppppppppQs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ba:b6:29:ed:32:66:58:78:a1:43:08:f2:4e:4b:9f:13:03:ba:60:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

Chains

Oct 14, 2024

Minor OS version

Major OS version

Entry point

5888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo CreateFileW ExitProcess VirtualAlloc LocalAlloc FindClose FindNextFileW FindFirstFileW LocalFree UnmapViewOfFile IsValidLanguageGroup ExpandEnvironmentStringsW lstrcatW SetFilePointer ReadFile GetLastError InterlockedDecrement GlobalUnlock lstrcmpiW GetACP GetProfileIntW LoadLibraryW FreeLibrary GetFileSize CreateFileMappingW CloseHandle MapViewOfFile GetStringTypeW IsDBCSLeadByteEx GetSystemDirectoryW WriteProfileStringW GetProfileStringW CompareStringW EnumSystemCodePagesW IsValidCodePage FindResourceW LoadResource LockResource FreeResource lstrcmpW GlobalAlloc GlobalFree lstrcpyW GetThreadLocale MulDiv MultiByteToWideChar WideCharToMultiByte lstrcpynW GetWindowsDirectoryW GetLocaleInfoW GlobalLock lstrlenW FlushFileBuffers SetStdHandle InterlockedIncrement GetStringTypeA LCMapStringW LCMapStringA WriteFile RtlUnwind HeapCreate HeapDestroy VirtualFree GetStdHandle SetHandleCount GetFileType GetEnvironmentStringsW GetEnvironmentStrings GetOEMCP FreeEnvironmentStringsA GetModuleFileNameA FreeEnvironmentStringsW GetCurrentProcess TerminateProcess UnhandledExceptionFilter HeapReAlloc HeapFree HeapAlloc GetVersion GetCommandLineA GetModuleHandleA LoadLibraryA GetStartupInfoA GetProcAddress

user32

EnumChildWindows WinHelpW GetWindowTextLengthW ReleaseDC CreateWindowExW SendMessageW GetDC EndPaint FillRect GetSysColor GetSystemMetrics BeginPaint PostQuitMessage GetAsyncKeyState ValidateRect GetMessageTime GetCursorPos WindowFromPoint ShowCursor GetUpdateRect SetCapture SetTimer GetWindowRect GetClientRect DefWindowProcW wsprintfW PtInRect MapWindowPoints GetParent GetWindowDC MoveWindow SetScrollPos DrawFocusRect SetScrollRange GetDesktopWindow IsWindowEnabled SetWindowTextW GetDlgCtrlID CallWindowProcW PostMessageW SetScrollInfo GetScrollInfo UnregisterClassW RegisterClipboardFormatW DestroyWindow GetKeyboardLayout ScreenToClient EnableWindow ClientToScreen LoadStringW GetMessagePos InvalidateRect SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW GetFocus GetWindowTextW SetWindowLongW GetClassNameW GetWindowLongW UpdateWindow CreateDialogParamW ShowWindow LoadCursorW GetDlgItem DispatchMessageW LoadIconW RegisterClassW GetMessageW IsDialogMessageW TranslateMessage ReleaseCapture KillTimer DefDlgProcW SetFocus

gdi32

GetTextExtentPoint32W GetCharWidth32W EnumFontFamiliesExW GetFontData CreateDIBitmap GetObjectW GetTextAlign SetTextAlign GetTextExtentPointW BitBlt PatBlt GetStockObject ExtTextOutW CreatePen MoveToEx LineTo GetDeviceCaps CreateFontIndirectW DeleteDC CreateCompatibleDC SetTextColor SetBkMode CreateCompatibleBitmap CreateSolidBrush SelectObject GetTextMetricsW TextOutW SetBkColor UnrealizeObject TranslateCharsetInfo CreateFontW DeleteObject

advapi32

RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExW RegEnumValueW

ole32

DoDragDrop OleInitialize OleUninitialize CoGetMalloc

Sharing

General

Malware Config

Signatures

File Explorer

590888b47a97fece6315dc056b75bcb4_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

advapi32

ole32

generic