JaffaCakes118_fe036d6b320632c7f9c06d237f44c6d3333460f0966d48dfdfd0d7fe7e8a5c69

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_fe036d6b320632c7f9c06d237f44c6d3333460f0966d48dfdfd0d7fe7e8a5c69
Size

4.4MB
MD5

452b3b7a3ee8f70fa25e58a1f9f47b7e
SHA1

09dbb3e76b167efdfdac444a7d60fd3f20c5779a
SHA256

fe036d6b320632c7f9c06d237f44c6d3333460f0966d48dfdfd0d7fe7e8a5c69
SHA512

4362ead37ed077dd5b044d16a59919dfc2cb3e5e02af774a58ed59ac22c7091c8271013a7fed149f1addc4b173c52f9455f310d00923b2eea65fb445f4d0c96a
SSDEEP

98304:PeMB+n0iylRiDkFrm0mwkCbpgZxsZEQoojsVi/4:Pe10iySkFrm0Djbp6zojsQ4

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_fe036d6b320632c7f9c06d237f44c6d3333460f0966d48dfdfd0d7fe7e8a5c69
.exe windows:5 windows x86 arch:x86

3da9dd1e240e6fc2c88c3cd6b14d6555

Code Sign

b6:7e:8e:a8:53:1a:24:04:0b:e5:00:5a:d7:19:62:73
Certificate

Issuer

POSTALCODE=10301

Not Before

21-11-2021 12:52

Not After

21-11-2022 12:52

Subject

POSTALCODE=10301

4e:2d:c7:09:51:d7:1f:b9:c4:e6:a4:2d:d6:71:e3:6a:52:ac:a9:93:b4:10:25:b5:41:96:cd:d1:c9:c6:05:8c
Signer

Actual PE Digest

4e:2d:c7:09:51:d7:1f:b9:c4:e6:a4:2d:d6:71:e3:6a:52:ac:a9:93:b4:10:25:b5:41:96:cd:d1:c9:c6:05:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\ronu.pdb

Imports

kernel32

ExitProcess
GetComputerNameA
SetInformationJobObject
FindFirstChangeNotificationW
lstrlenA
CopyFileExW
TlsGetValue
SetLocalTime
CommConfigDialogA
FreeLibrary
SetDllDirectoryW
InterlockedIncrement
InterlockedDecrement
ZombifyActCtx
SetFirmwareEnvironmentVariableA
GetNamedPipeHandleStateA
SetVolumeMountPointW
OpenSemaphoreA
OutputDebugStringW
GetTickCount
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
GetSystemWow64DirectoryA
CreateActCtxW
TlsSetValue
GetConsoleCP
GetPrivateProfileIntA
SetFileShortNameW
LoadLibraryW
GetConsoleMode
TerminateThread
GetCalendarInfoA
GetVersionExW
LeaveCriticalSection
GlobalFlags
HeapValidate
CreateSemaphoreA
IsDBCSLeadByte
GetModuleFileNameW
GetEnvironmentVariableA
CompareStringW
GetStartupInfoW
VerifyVersionInfoW
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
GetLongPathNameA
HeapSize
BackupWrite
VerLanguageNameA
CreateNamedPipeA
GetNumaHighestNodeNumber
GetPrivateProfileStringA
LoadLibraryA
ProcessIdToSessionId
LocalAlloc
GetFileType
WritePrivateProfileStringA
BuildCommDCBAndTimeoutsW
GetVolumePathNamesForVolumeNameA
GetModuleFileNameA
FindNextFileA
WriteProfileStringA
FindFirstChangeNotificationA
GetProcessShutdownParameters
FreeEnvironmentStringsW
WriteProfileStringW
BuildCommDCBA
GetConsoleCursorInfo
FindFirstVolumeA
GetVersionExA
TlsAlloc
GetWindowsDirectoryW
ReadConsoleOutputCharacterW
GetSystemTime
TlsFree
CopyFileExA
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
IsBadReadPtr
GetCommandLineW
HeapSetInformation
RtlUnwind
RaiseException
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapFree
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetCurrentThreadId
GetModuleHandleW
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
WriteFile
GetLocaleInfoW
OutputDebugStringA
WriteConsoleW
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
SetStdHandle
CreateFileW
CloseHandle
FlushFileBuffers

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 39.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.far
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vufac
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yod
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3da9dd1e240e6fc2c88c3cd6b14d6555

Code Sign

b6:7e:8e:a8:53:1a:24:04:0b:e5:00:5a:d7:19:62:73Certificate

4e:2d:c7:09:51:d7:1f:b9:c4:e6:a4:2d:d6:71:e3:6a:52:ac:a9:93:b4:10:25:b5:41:96:cd:d1:c9:c6:05:8cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.data Size: 6KB - Virtual size: 39.0MB

.far Size: 1KB - Virtual size: 4KB

.vufac Size: 3KB - Virtual size: 3KB

.yod Size: 512B - Virtual size: 234B

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 83KB - Virtual size: 82KB

b6:7e:8e:a8:53:1a:24:04:0b:e5:00:5a:d7:19:62:73
Certificate

4e:2d:c7:09:51:d7:1f:b9:c4:e6:a4:2d:d6:71:e3:6a:52:ac:a9:93:b4:10:25:b5:41:96:cd:d1:c9:c6:05:8c
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 6KB - Virtual size: 39.0MB

.far
Size: 1KB - Virtual size: 4KB

.vufac
Size: 3KB - Virtual size: 3KB

.yod
Size: 512B - Virtual size: 234B

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 83KB - Virtual size: 82KB