JaffaCakes118_5a01ce216631cbc16a626262956d91b0e4c4387313a6eaa1905a3b1111472600

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_5a01ce216631cbc16a626262956d91b0e4c4387313a6eaa1905a3b1111472600
Size

4.4MB
MD5

8c07fcae170f1f08a1aa641adafc9efd
SHA1

81211bb500e6bcbe4e582c99d90d83ac6a652f12
SHA256

5a01ce216631cbc16a626262956d91b0e4c4387313a6eaa1905a3b1111472600
SHA512

0486a02223e72a116ac9856b7a2ee0ccfaa75989756e818b8f1621b54e3e220a5d1564b48ec6e0e46429892582b85371b986ab50c466b0e4673966aae715a4a3
SSDEEP

98304:agmoB33TNsHf2nj7p1UCfLYfTx5NLruPu4wUXyMFYaEzmk/cvpFV:agDh3ZsHmUCDYfTFLEu4HyMBjFV

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_5a01ce216631cbc16a626262956d91b0e4c4387313a6eaa1905a3b1111472600
.exe windows:5 windows x86 arch:x86

69d02296fd41d5fbc6c18775cf2c5cb0

Code Sign

b9:a6:89:f3:89:b4:20:5d:13:b3:f4:19:cf:97:ef:5f
Certificate

Issuer

POSTALCODE=10051

Not Before

30-09-2021 14:37

Not After

30-09-2022 14:37

Subject

POSTALCODE=10051

8a:71:59:b5:2c:22:76:bf:2f:ed:98:80:32:ee:d2:66:a1:f9:76:6c:32:c9:b4:42:a8:f1:eb:06:06:d9:03:51
Signer

Actual PE Digest

8a:71:59:b5:2c:22:76:bf:2f:ed:98:80:32:ee:d2:66:a1:f9:76:6c:32:c9:b4:42:a8:f1:eb:06:06:d9:03:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\mufuyahijil\yukaluja-muz24\sir jiyibudi.pdb

Imports

kernel32

GetCommandLineW
GetThreadContext
SearchPathW
lstrlenA
FreeLibrary
InterlockedIncrement
GetQueuedCompletionStatus
GetCommState
GetProfileStringW
CallNamedPipeW
FreeEnvironmentStringsA
GetNumberFormatA
CreateActCtxW
FindResourceExA
GlobalAlloc
GetPrivateProfileIntA
GetSystemDirectoryW
SetFileShortNameW
GetVolumeInformationA
LoadLibraryW
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryA
HeapDestroy
GetBinaryTypeA
GetCompressedFileSizeA
GetStartupInfoW
LCMapStringA
GetPrivateProfileIntW
SetThreadLocale
GetStdHandle
GetLastError
SetLastError
GetProcAddress
CreateNamedPipeA
LoadLibraryA
CreateSemaphoreW
FindAtomA
GetModuleFileNameA
FindNextFileA
CreateIoCompletionPort
FindFirstChangeNotificationA
HeapSetInformation
FreeEnvironmentStringsW
GetCurrentDirectoryA
GetCPInfoExA
TerminateJobObject
FindAtomW
UnregisterWaitEx
GetSystemTime
CopyFileExA
DeleteFileA
CloseHandle
CreateFileW
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetModuleFileNameW
WriteFile
RtlUnwind
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapValidate
IsBadReadPtr
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
IsProcessorFeaturePresent
SetStdHandle
RaiseException
FlushFileBuffers

winhttp

WinHttpOpen

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.2MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69d02296fd41d5fbc6c18775cf2c5cb0

Code Sign

b9:a6:89:f3:89:b4:20:5d:13:b3:f4:19:cf:97:ef:5fCertificate

8a:71:59:b5:2c:22:76:bf:2f:ed:98:80:32:ee:d2:66:a1:f9:76:6c:32:c9:b4:42:a8:f1:eb:06:06:d9:03:51Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

winhttp

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 4.2MB - Virtual size: 8.4MB

.rsrc Size: 15KB - Virtual size: 655KB

.reloc Size: 32KB - Virtual size: 32KB

b9:a6:89:f3:89:b4:20:5d:13:b3:f4:19:cf:97:ef:5f
Certificate

8a:71:59:b5:2c:22:76:bf:2f:ed:98:80:32:ee:d2:66:a1:f9:76:6c:32:c9:b4:42:a8:f1:eb:06:06:d9:03:51
Signer

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 4.2MB - Virtual size: 8.4MB

.rsrc
Size: 15KB - Virtual size: 655KB

.reloc
Size: 32KB - Virtual size: 32KB