JaffaCakes118_bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a

General

Target
JaffaCakes118_bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a
Size 4.1MB
Sample241222-xp9d9awjht
SHA256 bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a
MD5 013bef712e87910d7a5a97e7892b51d8
SHA1 0952ae9132694a921289af8b8dad3c81c2e0681b
SHA512 4a34ed664300432d9e6541fbfe523a6f0f68b3eb9dc5bbc8c78a3171e8849500e08e434c631af950879966f79c131f7453143af62cef5f4ad4fbf7dc53b3881f
SSDEEP 98304:PeA8K/NpjeW/NdMhTTh6rz55280ecVMSjY900mBXTYGiEj8vPS4XMh:4KltNdqN6rl5280JVMmYw0GiE2Z8h
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a

.exe 4.1MB

JaffaCakes118_bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a

IMPHASH ff6659a3b7adcc9d3b718a91e331c2a9
SHA256 bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a
MD5 013bef712e87910d7a5a97e7892b51d8
SHA1 0952ae9132694a921289af8b8dad3c81c2e0681b
SHA512 4a34ed664300432d9e6541fbfe523a6f0f68b3eb9dc5bbc8c78a3171e8849500e08e434c631af950879966f79c131f7453143af62cef5f4ad4fbf7dc53b3881f
SSDEEP 98304:PeA8K/NpjeW/NdMhTTh6rz55280ecVMSjY900mBXTYGiEj8vPS4XMh:4KltNdqN6rl5280JVMmYw0GiE2Z8h
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

1a:9f:40:de:36:72:4b:9f:92:b5:90:93:be:45:c3:b4:5b:94:73:fc:2a:b7:06:cb:71:fd:da:6d:e8:3c:d2:9a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

27472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kaxikaziwuze6\bobubetejo tibig\wawij.pdb

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW ReadConsoleInputA SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW GetVolumeNameForVolumeMountPointA LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc AddAtomW CreateEventW FoldStringW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA TerminateJobObject RaiseException GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_bcf27f3ed817469470edb09ee11a81f2c554d57367ee439c992bdafedc62644a

PE Signature issue

kernel32

advapi32

generic