JaffaCakes118_8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432

General

Target
JaffaCakes118_8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432
Size 4.3MB
Sample241222-cc635synhn
SHA256 8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432
MD5 57d93005892030f826b4e5d6189d93da
SHA1 133c2fcded57a6ce8925e74a38c207fcb95317fd
SHA512 b63b75e33c8971c8e9f493280fa9b5637d12c2a7c52ac3f5d433e045e76dee824ca43805a84297327bb880822ddcf5192e15da43f9847248e28c4086273883eb
SSDEEP 98304:ePlhuZNt4cS1/t7YR8Vwpvnih2Ef7x/Bb69bsUun:r/c1/t7tWvg7vbVf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432

.exe 4.3MB

JaffaCakes118_8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432

IMPHASH 705b3a479c4f9a4f00e097c6805450fd
SHA256 8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432
MD5 57d93005892030f826b4e5d6189d93da
SHA1 133c2fcded57a6ce8925e74a38c207fcb95317fd
SHA512 b63b75e33c8971c8e9f493280fa9b5637d12c2a7c52ac3f5d433e045e76dee824ca43805a84297327bb880822ddcf5192e15da43f9847248e28c4086273883eb
SSDEEP 98304:ePlhuZNt4cS1/t7YR8Vwpvnih2Ef7x/Bb69bsUun:r/c1/t7tWvg7vbVf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d6:e2:85:48:56:8d:15:1c:fb:c1:d0:64:a9:7d:19:ab:98:68:8b:ee:b6:7d:62:1e:11:83:3b:a6:45:94:83:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 12, 2024

Minor OS version

1

Major OS version

5

Entry point

4290192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sebahokusixe\xowuhakux.pdb

kernel32

ExitProcess GetFullPathNameA LocalUnlock GetThreadContext GetPrivateProfileSectionNamesW EnumResourceNamesW SetCriticalSectionSpinCount GlobalMemoryStatus FindResourceA lstrcmpA FindFirstFileW EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW EnumDateFormatsExW CopyFileExW GetStringTypeA UnmapViewOfFile MoveFileExA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA SetUnhandledExceptionFilter LoadLibraryExW GetQueuedCompletionStatus MoveFileExW InterlockedDecrement GetCurrentProcess SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GlobalLock SetVolumeMountPointW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA _lclose GetModuleHandleW GetCommConfig GetProcessHeap IsBadReadPtr GetSystemTimeAsFileTime GetNumberFormatA GetPrivateProfileStringW GetConsoleTitleA GetCompressedFileSizeW ReadConsoleOutputA WaitNamedPipeW EnumTimeFormatsA SetCommState GetSystemWow64DirectoryA TzSpecificLocalTimeToSystemTime WaitForMultipleObjectsEx GetProcessTimes TlsSetValue AllocateUserPhysicalPages FindResourceExA GlobalAlloc GetConsoleMode FatalAppExitW GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoW ReadFileScatter SetSystemTimeAdjustment GetSystemWindowsDirectoryA SetConsoleCP DeleteVolumeMountPointW LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte GetModuleFileNameW CreateActCtxA GetBinaryTypeW lstrlenW WritePrivateProfileStringW GlobalUnlock VirtualUnlock CreateJobObjectA GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW VerifyVersionInfoW InterlockedExchange GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer SetLastError ReadConsoleOutputCharacterA GetProcAddress GetLongPathNameA HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateJobSet EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetNumaHighestNodeNumber FindClose GetPrivateProfileStringA GetAtomNameA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId BuildCommDCBAndTimeoutsW GetExitCodeThread SetCurrentDirectoryW SetFileApisToANSI QueryDosDeviceW PostQueuedCompletionStatus HeapWalk GetPrivateProfileStructA SetNamedPipeHandleState SetEnvironmentVariableA GetModuleFileNameA GetDefaultCommConfigA WriteProfileStringA EnumDateFormatsA WaitCommEvent SetConsoleTitleW FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent lstrcatW HeapSetInformation IsDebuggerPresent FreeEnvironmentStringsW FindNextFileW WriteProfileStringW VirtualProtect CompareStringA GetConsoleCursorInfo WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle GetVersionExA TlsAlloc TerminateJobObject CloseHandle GetVersion FindFirstVolumeW DeleteTimerQueueTimer GlobalAddAtomW SetFileValidData GetTempPathA FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx InterlockedPushEntrySList TlsFree CopyFileExA CommConfigDialogW DeleteFileA CreateThread lstrcpyA GetCommandLineW GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId InterlockedIncrement DecodePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsGetValue HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP RaiseException SetStdHandle CreateFileW FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_8802d15ec8ee8ef608c72b06face442c22a4240572331fac400a8dadaa688432

PE Signature issue

kernel32

generic