f8343265b127e4851667e1b6c1f577b8_JaffaCakes118

General

Target
f8343265b127e4851667e1b6c1f577b8_JaffaCakes118
Size 4.4MB
Sample240418-ryblpagh9s
SHA256 1bf37ce1ec0b4c02ee0d2fff1ac24d34627c754eab070dbcdf49e667b721a674
MD5 f8343265b127e4851667e1b6c1f577b8
SHA1 6f2b4077b3d4410e6ebb3a6ada451ff02d7d4787
SHA512 7c6d0612dd595abbd14047b5e356fdecbd78cd4d62d7fdfa5ccfa922bab36c43f8e58d4ab6d442b9c680da614077619ee09772faa8881ab0188328323fde5cf9
SSDEEP 98304:NQRSIsImTBBBwJEBNJS5d3YbyIQvDEezarUzJevCfGZcEvCg3:NQRln2yOBrEYIepvCqlvZ3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f8343265b127e4851667e1b6c1f577b8_JaffaCakes118

.exe 4.4MB

f8343265b127e4851667e1b6c1f577b8_JaffaCakes118

IMPHASH 5cf8ab4c07bd680cc3ad63fcf1e8b997
SHA256 1bf37ce1ec0b4c02ee0d2fff1ac24d34627c754eab070dbcdf49e667b721a674
MD5 f8343265b127e4851667e1b6c1f577b8
SHA1 6f2b4077b3d4410e6ebb3a6ada451ff02d7d4787
SHA512 7c6d0612dd595abbd14047b5e356fdecbd78cd4d62d7fdfa5ccfa922bab36c43f8e58d4ab6d442b9c680da614077619ee09772faa8881ab0188328323fde5cf9
SSDEEP 98304:NQRSIsImTBBBwJEBNJS5d3YbyIQvDEezarUzJevCfGZcEvCg3:NQRln2yOBrEYIepvCqlvZ3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ed:8e:2b:12:39:06:1c:71:58:50:c2:fc:fe:67:ec:c6:5a:74:da:bb:4c:a5:a7:f7:b1:76:d8:3c:dd:8b:b5:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10051

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

4471766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\girifunuri rinuxaboz_zicigifixan.pdb

kernel32

GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputA GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

f8343265b127e4851667e1b6c1f577b8_JaffaCakes118

PE Signature issue

kernel32

user32

generic