JaffaCakes118_910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007

General

Target
JaffaCakes118_910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007
Size 4.4MB
Sample241222-pgrv8sxpct
SHA256 910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007
MD5 2b9e6e3662824a911e79ea107dbf26f1
SHA1 c9123b0e55779b3f9eb6da138b749fd8a278fac4
SHA512 010d0b35561051aa6d40c69b5fbc52cb654011489e6f6313aaf53a986bbf455c1ce7c6990a74628db70482bbd7af3ad57087cb34f8e61db4c53a4849b3019e60
SSDEEP 98304:GSULIN8uhQ9y514pSnzwgl5+pC7UXb3yG4WV1i8WEFAxCXK:c2vhQm14scI+pC74b3yG4CxAxCa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007

.exe 4.4MB

JaffaCakes118_910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007

IMPHASH a5091bd61667ae52b24f539467c52b28
SHA256 910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007
MD5 2b9e6e3662824a911e79ea107dbf26f1
SHA1 c9123b0e55779b3f9eb6da138b749fd8a278fac4
SHA512 010d0b35561051aa6d40c69b5fbc52cb654011489e6f6313aaf53a986bbf455c1ce7c6990a74628db70482bbd7af3ad57087cb34f8e61db4c53a4849b3019e60
SSDEEP 98304:GSULIN8uhQ9y514pSnzwgl5+pC7UXb3yG4WV1i8WEFAxCXK:c2vhQm14scI+pC74b3yG4CxAxCa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ce:f2:75:da:da:2d:7e:d1:27:2d:38:fe:aa:e2:9c:f7:ec:bf:53:21:9c:b0:83:9f:78:88:db:19:54:ef:a6:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10051

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

8770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kazonobutesi xe.pdb

kernel32

UnregisterWait lstrcpynA GetDefaultCommConfigW ReadConsoleA InterlockedDecrement GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID SetVolumeMountPointW GetSystemDefaultLCID GetEnvironmentStrings ReadConsoleInputA LeaveCriticalSection GetAtomNameW ReadFile PulseEvent LCMapStringA VerifyVersionInfoW GetCPInfoExW GetLongPathNameW GetProcAddress GetComputerNameExW CopyFileA VerLanguageNameW GetLocalTime WriteConsoleA LocalAlloc CreateTapePartition SetConsoleOutputCP SetEnvironmentVariableA GetModuleFileNameA SetConsoleTitleW GetModuleHandleA PeekConsoleInputA Module32NextW GetCurrentProcessId AddConsoleAliasA EnumCalendarInfoExA FindNextVolumeA GetACP GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection HeapSize SetHandleCount GetFileType DeleteCriticalSection SetFilePointer FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage RaiseException MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc SetStdHandle FlushFileBuffers GetLocaleInfoA GetConsoleOutputCP WriteConsoleW LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_910d8f9e371630c244220046cee813df1e0d0ea66fa9439de9438c0c9fc5c007

PE Signature issue

kernel32

generic