JaffaCakes118_beb2d335c0cc06390fec720e43ebb838007a9875302beb2fc4546022d59d8104

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_beb2d335c0cc06390fec720e43ebb838007a9875302beb2fc4546022d59d8104
Size

4.1MB
MD5

24459bf5ffdce7e1e6e2636ed34faee2
SHA1

939d2edaebe3b364680bc373c4bac2c820d6314f
SHA256

beb2d335c0cc06390fec720e43ebb838007a9875302beb2fc4546022d59d8104
SHA512

e87970a585bae161ae9a3a4d964e0031b29ffe564761bc6d9b4cfd2c178f789498a20211b87175f4a09983013318d2283c64301c80d1d443b54d434b519d5791
SSDEEP

98304:BbFyhGtiUOL32YOsc4Mn+cNxeQjjJ0E2Nae3D2oLL:hFy5EscbN5jJ0PNN33LL

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_beb2d335c0cc06390fec720e43ebb838007a9875302beb2fc4546022d59d8104
.exe windows:5 windows x86 arch:x86

25cd38c3ab17c7534ea5c1672584a781

Code Sign

0f:ca:b0:af:96:3a:6f:ce:e8:34:ef:57:92:0e:bf:e3
Certificate

Issuer

POSTALCODE=10407

Not Before

02-11-2022 17:41

Not After

02-11-2023 17:41

Subject

POSTALCODE=10407

20:03:2a:08:8e:1c:40:46:d8:78:54:23:41:2c:41:f2:b0:75:e2:38:b4:cd:10:17:f4:48:2e:28:8b:61:fa:0a
Signer

Actual PE Digest

20:03:2a:08:8e:1c:40:46:d8:78:54:23:41:2c:41:f2:b0:75:e2:38:b4:cd:10:17:f4:48:2e:28:8b:61:fa:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\debuvumodikoso mexehutepuga.pdb

Imports

kernel32

SetFilePointer
lstrlenA
GetConsoleAliasesLengthW
GetConsoleAliasExesA
MoveFileExA
MapUserPhysicalPages
InterlockedIncrement
WriteConsoleInputA
SleepEx
GetFileAttributesExA
GetModuleHandleW
GetGeoInfoW
WaitNamedPipeW
GlobalAlloc
LoadLibraryW
GetFileAttributesA
EnumSystemCodePagesA
GetConsoleAliasW
WriteConsoleW
ReadFile
GetSystemDirectoryA
SetThreadContext
LCMapStringA
GetLastError
GetProcAddress
VirtualAlloc
WriteProfileSectionA
SetComputerNameA
LoadLibraryA
UnhandledExceptionFilter
LocalAlloc
CreateHardLinkW
CreateEventW
AddAtomA
OpenJobObjectW
FindNextFileA
GetModuleHandleA
CreateMutexA
FindNextFileW
ReadConsoleInputW
LCMapStringW
GetVolumePathNameA
GetSystemDefaultLangID
HeapAlloc
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
RaiseException
SetStdHandle
HeapSize
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetEndOfFile
GetProcessHeap

gdi32

GetTextExtentExPointW

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 43.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25cd38c3ab17c7534ea5c1672584a781

Code Sign

0f:ca:b0:af:96:3a:6f:ce:e8:34:ef:57:92:0e:bf:e3Certificate

20:03:2a:08:8e:1c:40:46:d8:78:54:23:41:2c:41:f2:b0:75:e2:38:b4:cd:10:17:f4:48:2e:28:8b:61:fa:0aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 4.0MB - Virtual size: 43.9MB

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 27KB - Virtual size: 26KB

0f:ca:b0:af:96:3a:6f:ce:e8:34:ef:57:92:0e:bf:e3
Certificate

20:03:2a:08:8e:1c:40:46:d8:78:54:23:41:2c:41:f2:b0:75:e2:38:b4:cd:10:17:f4:48:2e:28:8b:61:fa:0a
Signer

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 4.0MB - Virtual size: 43.9MB

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 27KB - Virtual size: 26KB