68de13cd42da040f2c1c14d26ef06f99_JaffaCakes118

General

Target
68de13cd42da040f2c1c14d26ef06f99_JaffaCakes118
Size 1.0MB
Sample241022-ewbsfsyfmk
SHA256 7b55392db88949725b4a8352914fc89cd1e56bb10cd414d698bba1b8ccda9caa
MD5 68de13cd42da040f2c1c14d26ef06f99
SHA1 d8b41d90427253412e8faa5b18992c32310ad09b
SHA512 c14fbed4da096c6926e077cb427000da96f0665903063c49d9aed8d949691a97c9bf4e9513199d3a0f4b9de299a3efcf0830f1e8f5c78bd915f875f7fa91dd17
SSDEEP 12288:80wtBCKqYKqphuDsBwGs9eX0KLVOL5Z0hxj7xwDzTGZEFf+1x3Umlzd1ppN9:80wfnKXsNs9eEwcAj7x8VKRR9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

68de13cd42da040f2c1c14d26ef06f99_JaffaCakes118

.exe 1.0MB

68de13cd42da040f2c1c14d26ef06f99_JaffaCakes118

IMPHASH f81fb2d0338e659d075733d3efc9dcad
SHA256 7b55392db88949725b4a8352914fc89cd1e56bb10cd414d698bba1b8ccda9caa
MD5 68de13cd42da040f2c1c14d26ef06f99
SHA1 d8b41d90427253412e8faa5b18992c32310ad09b
SHA512 c14fbed4da096c6926e077cb427000da96f0665903063c49d9aed8d949691a97c9bf4e9513199d3a0f4b9de299a3efcf0830f1e8f5c78bd915f875f7fa91dd17
SSDEEP 12288:80wtBCKqYKqphuDsBwGs9eX0KLVOL5Z0hxj7xwDzTGZEFf+1x3Umlzd1ppN9:80wfnKXsNs9eEwcAj7x8VKRR9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

b8:af:57:47:d8:7b:f1:17:30:36:3e:4f:b3:a0:0e:fc:a6:f4:79:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Premium Installer,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Premium Installer,L=Wilmington,ST=Delaware,C=US

Chains

Oct 21, 2024

Subject

Serial Number

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Jul 16, 2036

Subject

CN=Premium Installer,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Premium Installer,L=Wilmington,ST=Delaware,C=US

Serial Number

35:bb:74:b9:05:c0:1c:e6:1d:a1:31:ba:49:33:7f:33

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 13, 2013 - Aug 2, 2014

Subject

CN=Premium Installer,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Premium Installer,L=Wilmington,ST=Delaware,C=US

Serial Number

70:65:20:eb:ef:77:03:a7:4b:71:e9:67:35:ff:ea:17

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2012 - Jul 12, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

5

Entry point

17772

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA GetThreadContext WaitForSingleObject CreateProcessA GetProcAddress VirtualAlloc LoadLibraryA CloseHandle GetTempPathA GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId LeaveCriticalSection FatalAppExitA EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoW GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

68de13cd42da040f2c1c14d26ef06f99_JaffaCakes118

PE Signature issue

kernel32

generic