JaffaCakes118_33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7

General

Target
JaffaCakes118_33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7
Size 4.4MB
Sample241222-gjnbtswpgr
SHA256 33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7
MD5 bc00b4af89f3f949814f9813d17e4d32
SHA1 8597997f8575701d23109cdc00b6fee5b18b74cd
SHA512 13b691ac028c257430a03389ffbd727a85d43a3e28e149aa968bdb0adefc3e0622747dcac7f17d5e6b52c0c07ebf729e40328321281e86c1ec26ef06a933b3ab
SSDEEP 98304:HOukxao3WVfCRsg5+Zxs5nmA1nZnIm9RB8/OAycWAQAhM:m9WdusA3FmA1nJIE+/jHFhM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7

.exe 4.4MB

JaffaCakes118_33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7

IMPHASH 41ae3a1dcdcc3462598a2d3012d6e252
SHA256 33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7
MD5 bc00b4af89f3f949814f9813d17e4d32
SHA1 8597997f8575701d23109cdc00b6fee5b18b74cd
SHA512 13b691ac028c257430a03389ffbd727a85d43a3e28e149aa968bdb0adefc3e0622747dcac7f17d5e6b52c0c07ebf729e40328321281e86c1ec26ef06a933b3ab
SSDEEP 98304:HOukxao3WVfCRsg5+Zxs5nmA1nZnIm9RB8/OAycWAQAhM:m9WdusA3FmA1nJIE+/jHFhM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d8:2d:d2:7d:42:dc:fd:dc:40:e7:b3:b8:fe:26:2d:55:86:0c:eb:32:8a:5a:91:8e:f0:f8:36:97:83:c4:3f:a6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

8101

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wepoyafejeki\lip-holazatuhiner 7\fajorice.pdb

kernel32

CreateTimerQueue GetDefaultCommConfigW EndUpdateResourceW InterlockedIncrement SetEnvironmentVariableW GetEnvironmentStringsW AddConsoleAliasW EnumCalendarInfoExW GetConsoleTitleA ReadConsoleW WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA lstrcpynW HeapReAlloc HeapQueryInformation GetModuleFileNameW GetACP LCMapStringA GetProcAddress GetComputerNameExW FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW GetLocalTime LoadLibraryA WaitForMultipleObjects VirtualProtect PeekConsoleInputA GetCPInfoExA GetVersionExA ReadConsoleInputW GetVersion DeleteTimerQueueTimer GetCurrentProcessId FindNextVolumeA CreateThread CreateFileA PulseEvent VerifyVersionInfoA GetCommandLineW SetStdHandle SetFilePointer WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW GetStringTypeW GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ScreenToClient RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_33eac40d20a6bb02b737dcdc46a16e532642eccc6356d01c25e21319c80482c7

PE Signature issue

kernel32

user32

generic