JaffaCakes118_744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce

General

Target
JaffaCakes118_744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce
Size 4.5MB
Sample241222-abdzvsvldt
SHA256 744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce
MD5 4b29ca4bd712213eb3feb43f8170c5e7
SHA1 2712aeb17071ed8496d859036350d2019a8bb273
SHA512 6b79bac199bf80f5f2f9d8b6d6338da47990780d3f74a4934363022538bc0fd34fb015c0446ee19d311ea739a031926949cabffb77f24c2e5617c5fb027b9eff
SSDEEP 98304:JdB1PwvDnaP/Dto1ykAfRs/bhqmjgP1cRpm471kK0vMP:JdPenaPbt1fNmjgP1OZ71/P
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce

.exe 4.5MB

JaffaCakes118_744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce

IMPHASH a67363b1827a6fdd891fcccaabc55fc6
SHA256 744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce
MD5 4b29ca4bd712213eb3feb43f8170c5e7
SHA1 2712aeb17071ed8496d859036350d2019a8bb273
SHA512 6b79bac199bf80f5f2f9d8b6d6338da47990780d3f74a4934363022538bc0fd34fb015c0446ee19d311ea739a031926949cabffb77f24c2e5617c5fb027b9eff
SSDEEP 98304:JdB1PwvDnaP/Dto1ykAfRs/bhqmjgP1cRpm471kK0vMP:JdPenaPbt1fNmjgP1OZ71/P
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

79:55:25:61:a0:48:57:0a:f9:bd:af:12:b8:1a:4b:23:7b:ef:dd:f7:a6:c2:49:ee:9d:29:e7:62:a9:66:c4:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10197

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

6096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wed.pdb

kernel32

GetCommandLineW FileTimeToDosDateTime EnumResourceNamesW GetNativeSystemInfo CopyFileExW SetLocalTime GetCPInfo HeapAlloc SetDllDirectoryW InterlockedIncrement GetCommState ReadConsoleA InterlockedDecrement GlobalSize GetSystemWindowsDirectoryW GlobalLock GetProfileSectionA CancelWaitableTimer GetModuleHandleW GetTickCount GetPrivateProfileStringW TlsSetValue ActivateActCtx GlobalAlloc LoadLibraryW TerminateThread GetConsoleAliasExesLengthW GetCompressedFileSizeA CompareStringW lstrlenW SetThreadPriority DeactivateActCtx GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW VerifyVersionInfoW CreateDirectoryA InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetLastError GetThreadLocale ReadConsoleOutputCharacterA GetProcAddress SetStdHandle EnterCriticalSection CreateMemoryResourceNotification DisableThreadLibraryCalls Process32FirstW WritePrivateProfileStringA FindAtomA SetSystemTime SetEnvironmentVariableA FindNextFileA WriteProfileStringA FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW WriteProfileStringW GetCurrentThreadId GetCPInfoExA UnregisterWaitEx TlsFree GetVolumeInformationW CreateFileA GetConsoleOutputCP MultiByteToWideChar GetStartupInfoW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc SetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapSize HeapReAlloc VirtualAlloc RtlUnwind WideCharToMultiByte DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeA GetLocaleInfoA LoadLibraryA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle WriteConsoleA

user32

GetMenuItemID

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_744ff870179084acc142160b5525da1c5925dd07d7a5528056d0f9a0e41ef2ce

PE Signature issue

kernel32

user32

winhttp

generic