3c4808fcc3b035972f114ec4532e5f8e_JaffaCakes118

General

Target
3c4808fcc3b035972f114ec4532e5f8e_JaffaCakes118
Size 4.5MB
Sample241012-13nlgsybpp
SHA256 cb7fc22f3b5ccf76238049bd7388f760204728fe846742fbda3560b1085efa7f
MD5 3c4808fcc3b035972f114ec4532e5f8e
SHA1 aeb6624a72b571d75028dca6f1f2e501994cebd9
SHA512 9b8e08bef38da264fe82c626bc5b9cf8513e38a386361194fb8e24108605b415640e7c97d560406c3774cd0248ad0b1a34d1aeb61e84ce8a9fa9aa4b027007aa
SSDEEP 98304:argRwGt7eme6jWyULYgwHUUVYhW1djzfoXMMFe8D/cqqom3IaGwifndW:aMRN7B+yzVU9hW1eMM0e/BPdaGZPw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3c4808fcc3b035972f114ec4532e5f8e_JaffaCakes118

.exe 4.5MB

3c4808fcc3b035972f114ec4532e5f8e_JaffaCakes118

IMPHASH 368e97c3444afc7b37df6998ab5d491d
SHA256 cb7fc22f3b5ccf76238049bd7388f760204728fe846742fbda3560b1085efa7f
MD5 3c4808fcc3b035972f114ec4532e5f8e
SHA1 aeb6624a72b571d75028dca6f1f2e501994cebd9
SHA512 9b8e08bef38da264fe82c626bc5b9cf8513e38a386361194fb8e24108605b415640e7c97d560406c3774cd0248ad0b1a34d1aeb61e84ce8a9fa9aa4b027007aa
SSDEEP 98304:argRwGt7eme6jWyULYgwHUUVYhW1djzfoXMMFe8D/cqqom3IaGwifndW:aMRN7B+yzVU9hW1eMM0e/BPdaGZPw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c6:90:d0:28:44:22:f4:b4:20:0e:85:ff:90:36:c1:e9:88:58:91:71:83:08:ee:7c:1b:86:b7:88:bd:4f:89:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10197

Chains

Oct 9, 2024

Minor OS version

0

Major OS version

5

Entry point

8400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\geto sufe\xigocozuso\zuvojojayu.pdb

kernel32

FileTimeToDosDateTime EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer GetConsoleAliasesLengthW CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW GlobalLock GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount VirtualFree GetCommandLineA LoadLibraryW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA ReadFile GetModuleFileNameW CompareStringW lstrlenW LCMapStringA ReleaseActCtx GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetLastError GetCurrentDirectoryW GetProcAddress WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetCPInfoExA OpenSemaphoreW GetVersionExA TlsAlloc FindAtomW GetSystemTime MoveFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess SetHandleCount GetStdHandle GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

3c4808fcc3b035972f114ec4532e5f8e_JaffaCakes118

PE Signature issue

kernel32

generic