JaffaCakes118_0719f599720d705a33aa0790b32ea245d46f3b24d0c0816abd9b4ed41f6da38b

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_0719f599720d705a33aa0790b32ea245d46f3b24d0c0816abd9b4ed41f6da38b
Size

4.4MB
MD5

54f12b57215083f58cb7297852938925
SHA1

a2c4bf3541bb3e084dea9cd81afec749c510ed0c
SHA256

0719f599720d705a33aa0790b32ea245d46f3b24d0c0816abd9b4ed41f6da38b
SHA512

7a0da21358430aa460d213aad6acf76afef479c1be5231d9ddb8dfcc955e185ab3cef9f627dea05059a2d67fc05141f63eea6c204d0f6350f1cf1ee63febe3d3
SSDEEP

98304:Z6hN0j1zKQooDvy/RAOA89Qs5f5rFhF9lwqhBFrKt8Srn:ZKiyJI89QWTFHwqhBpkn

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_0719f599720d705a33aa0790b32ea245d46f3b24d0c0816abd9b4ed41f6da38b
.exe windows:5 windows x86 arch:x86

0651d9dcd3efcdffaff927d730c581e7

Code Sign

22:87:e4:5d:eb:b5:82:ee:ac:d9:f2:94:fa:9f:93:9f
Certificate

Issuer

POSTALCODE=10051

Not Before

22-08-2021 21:23

Not After

22-08-2022 21:23

Subject

POSTALCODE=10051

dd:e3:89:cb:96:88:81:37:93:78:42:8b:29:0c:da:cf:37:a9:e2:fd:fe:f9:0d:a3:04:e9:f4:d6:fb:ae:80:2d
Signer

Actual PE Digest

dd:e3:89:cb:96:88:81:37:93:78:42:8b:29:0c:da:cf:37:a9:e2:fd:fe:f9:0d:a3:04:e9:f4:d6:fb:ae:80:2d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\mekoh32\yadoj29\tore\botebovoki\jebigal 40\muzimudidoc.pdb

Imports

kernel32

UnregisterWait
SetThreadContext
SetFilePointer
lstrlenA
CopyFileExW
InterlockedIncrement
GetQueuedCompletionStatus
GetCommState
InterlockedDecrement
CompareFileTime
GetNamedPipeHandleStateA
GlobalLock
WaitForSingleObject
SetEvent
OpenSemaphoreA
FreeEnvironmentStringsA
GetTickCount
CreateNamedPipeW
VirtualFree
GetConsoleAliasesLengthA
GetCommandLineA
GetDriveTypeA
TlsSetValue
GetPriorityClass
GetConsoleMode
TerminateThread
GetSystemWindowsDirectoryA
SetConsoleMode
IsProcessorFeaturePresent
ReadFile
GetOverlappedResult
CompareStringW
GetStartupInfoW
GetPrivateProfileIntW
CreateDirectoryA
ReleaseActCtx
GetFileSizeEx
SetCurrentDirectoryA
SetThreadLocale
OpenMutexW
GetLastError
IsDBCSLeadByteEx
ReadConsoleOutputCharacterA
GetProcAddress
CopyFileA
GetPrivateProfileStringA
LoadLibraryA
LocalAlloc
IsSystemResumeAutomatic
WriteProfileSectionW
HeapWalk
SetNamedPipeHandleState
SetConsoleTitleW
FindFirstChangeNotificationA
EnumResourceNamesA
WriteProfileStringW
GetConsoleCursorInfo
FatalAppExitA
GetCurrentThreadId
GetCPInfoExA
GetVersionExA
FindAtomW
FindActCtxSectionStringW
UnregisterWaitEx
GetSystemTime
LCMapStringW
DeleteFileA
WideCharToMultiByte
HeapValidate
IsBadReadPtr
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsFree
SetLastError
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
GetModuleFileNameA
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
MultiByteToWideChar
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
CreateFileA
CloseHandle

winhttp

WinHttpCloseHandle

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.2MB - Virtual size: 35.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0651d9dcd3efcdffaff927d730c581e7

Code Sign

22:87:e4:5d:eb:b5:82:ee:ac:d9:f2:94:fa:9f:93:9fCertificate

dd:e3:89:cb:96:88:81:37:93:78:42:8b:29:0c:da:cf:37:a9:e2:fd:fe:f9:0d:a3:04:e9:f4:d6:fb:ae:80:2dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

winhttp

Sections

.text Size: 119KB - Virtual size: 119KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 4.2MB - Virtual size: 35.6MB

.rsrc Size: 13KB - Virtual size: 13KB

22:87:e4:5d:eb:b5:82:ee:ac:d9:f2:94:fa:9f:93:9f
Certificate

dd:e3:89:cb:96:88:81:37:93:78:42:8b:29:0c:da:cf:37:a9:e2:fd:fe:f9:0d:a3:04:e9:f4:d6:fb:ae:80:2d
Signer

.text
Size: 119KB - Virtual size: 119KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 4.2MB - Virtual size: 35.6MB

.rsrc
Size: 13KB - Virtual size: 13KB