7b9affe73926b479729c32eec32306f9_JaffaCakes118

General

Target
7b9affe73926b479729c32eec32306f9_JaffaCakes118
Size 4.5MB
Sample241029-dnry2a1qas
SHA256 21391fc51c85957fb1bf530fbdd01b9cc6b855445c5ae6e46d9be51441ee62f5
MD5 7b9affe73926b479729c32eec32306f9
SHA1 eb386238f8e1ddd63b0d1b92e73a051e3dc00914
SHA512 2db17afa93f13a5339337b2fa55bb26d0fad3ec132738a9a61dfd6cf51f4e72e593566c7052e25f13fc2132f5f40b7af547a3ea05eb8b89585fdd87537d1d196
SSDEEP 98304:Bh00Ggu38pYDjm9fHTRWvAP9IAiz+qzqPaOoZ/Pcw:BhYgu2ZY8IAnjPaT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

7b9affe73926b479729c32eec32306f9_JaffaCakes118

.exe 4.5MB

7b9affe73926b479729c32eec32306f9_JaffaCakes118

IMPHASH 6dacec1c54365d76351cf2216eab7641
SHA256 21391fc51c85957fb1bf530fbdd01b9cc6b855445c5ae6e46d9be51441ee62f5
MD5 7b9affe73926b479729c32eec32306f9
SHA1 eb386238f8e1ddd63b0d1b92e73a051e3dc00914
SHA512 2db17afa93f13a5339337b2fa55bb26d0fad3ec132738a9a61dfd6cf51f4e72e593566c7052e25f13fc2132f5f40b7af547a3ea05eb8b89585fdd87537d1d196
SSDEEP 98304:Bh00Ggu38pYDjm9fHTRWvAP9IAiz+qzqPaOoZ/Pcw:BhYgu2ZY8IAnjPaT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

81:c3:ef:5f:b0:8d:b6:03:c8:48:a8:ce:d1:dd:72:8b:69:38:df:b5:2a:cf:fc:25:99:93:a0:87:4f:2c:d1:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Oct 25, 2024

Minor OS version

0

Major OS version

5

Entry point

8688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lixeciri\sosumimayiruv\yezohirumin\monera.pdb

kernel32

GetFileSize SetPriorityClass GetNativeSystemInfo SetFilePointer CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA WriteConsoleInputA GetComputerNameW SetEvent FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW FindResourceExA GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW InitAtomTable GetFileAttributesA SetConsoleCursorPosition GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW lstrlenW GlobalUnlock CreateDirectoryA ReleaseActCtx EnumResourceNamesW OpenMutexW GetHandleInformation GetProcAddress GetProcessHeaps ReadFileEx SetComputerNameA LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx GetSystemTime LCMapStringW AreFileApisANSI GetStartupInfoA FileTimeToDosDateTime CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetLastError GetModuleFileNameA WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle GetModuleHandleA

user32

GetMonitorInfoA

gdi32

GetCharWidthW

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

7b9affe73926b479729c32eec32306f9_JaffaCakes118

PE Signature issue

kernel32

user32

gdi32

msimg32

generic