2a11d0bdc5ba1a9d862f3dfefa5cb866_JaffaCakes118

General

Target
2a11d0bdc5ba1a9d862f3dfefa5cb866_JaffaCakes118
Size 4.5MB
Sample241009-d495jsvfna
SHA256 2fc34af4ced37dd270187b5b8745a91e5a2b019e8679391558fcfb7f65297a6b
MD5 2a11d0bdc5ba1a9d862f3dfefa5cb866
SHA1 86fa5670adf9fefb5553245e63663c2117eec014
SHA512 dc3e0d3133289864ec678d10887be7cb103db69d4ee615f9c17c1016b2f97d3b1b9c467b587087a496b74c6974b276983aae8d581fbbe0671a2a1ee29ff9a3cd
SSDEEP 98304:E6opDexKJvw5yzIC28Vep1mZ4QfFjItKfbDrWJS0uyn:2ecJvo0ep124QfFjbbDrk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2a11d0bdc5ba1a9d862f3dfefa5cb866_JaffaCakes118

.exe 4.5MB

2a11d0bdc5ba1a9d862f3dfefa5cb866_JaffaCakes118

IMPHASH 10d590d1f4ed2f9a6fb903cd9f148a28
SHA256 2fc34af4ced37dd270187b5b8745a91e5a2b019e8679391558fcfb7f65297a6b
MD5 2a11d0bdc5ba1a9d862f3dfefa5cb866
SHA1 86fa5670adf9fefb5553245e63663c2117eec014
SHA512 dc3e0d3133289864ec678d10887be7cb103db69d4ee615f9c17c1016b2f97d3b1b9c467b587087a496b74c6974b276983aae8d581fbbe0671a2a1ee29ff9a3cd
SSDEEP 98304:E6opDexKJvw5yzIC28Vep1mZ4QfFjItKfbDrWJS0uyn:2ecJvo0ep124QfFjbbDrk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

47:49:05:5e:da:47:bc:52:a9:03:ce:19:f5:1b:4d:a5:70:88:82:d7:bc:48:b4:95:71:72:03:ad:ca:ea:51:17

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Oct 8, 2024

Minor OS version

0

Major OS version

5

Entry point

7456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gucewifudur\pi.pdb

kernel32

FileTimeToDosDateTime EnumResourceNamesW GetFileSize SetPriorityClass SetFilePointer CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA WriteConsoleInputA GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW GetCommandLineA FindResourceExA GlobalAlloc LoadLibraryW GetSystemWow64DirectoryW GetConsoleAliasExesLengthW InitAtomTable GetFileAttributesA IsProcessorFeaturePresent CreateSemaphoreA SetConsoleCursorPosition GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult lstrlenW GlobalUnlock CreateDirectoryA ReleaseActCtx GetStartupInfoA OpenMutexW GetHandleInformation GetLastError GetProcAddress GetProcessHeaps ReadFileEx SetComputerNameA LoadLibraryA GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA CompareStringA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx GetSystemTime LCMapStringW AreFileApisANSI UnhandledExceptionFilter SetUnhandledExceptionFilter MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WideCharToMultiByte LCMapStringA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

2a11d0bdc5ba1a9d862f3dfefa5cb866_JaffaCakes118

PE Signature issue

kernel32

generic