JaffaCakes118_481b1ede8bf1829a9fdab23e699aa9f0a2322346505bf1d067e81a24b7f67621

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_481b1ede8bf1829a9fdab23e699aa9f0a2322346505bf1d067e81a24b7f67621
Size

4.2MB
MD5

64af6650b0fdcb7c969bb6295f3e1af1
SHA1

984633033b3d17b1308f449cc5a0c3d2f85fed9c
SHA256

481b1ede8bf1829a9fdab23e699aa9f0a2322346505bf1d067e81a24b7f67621
SHA512

8517ad05177bb17efea4f74b24fe1ac9fbcec112795ee77ebd2cbf558bbaa0190f1814834f7c025a99591ad2d4cdb2e561abbadac190c9ea3b6572e4c332b8d5
SSDEEP

98304:eSfJ7mNnRUW9qRsN2ntRB6WmHxoOg8MNurAZ3j:eO1NW9ksNaw9hIurOz

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_481b1ede8bf1829a9fdab23e699aa9f0a2322346505bf1d067e81a24b7f67621
.exe windows:5 windows x86 arch:x86

cabb00b08289b9a7c13f43eb8bf20f72

Code Sign

2a:36:6a:ee:52:b1:68:8e:93:00:00:0e:4c:ca:f2:87
Certificate

Issuer

POSTALCODE=10301

Not Before

14-11-2021 09:06

Not After

14-11-2022 09:06

Subject

POSTALCODE=10301

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14
Signer

Actual PE Digest

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\now\kivepimogawi\xeruyu90\mapuh_vuc\waheyebizidis\line\r.pdb

Imports

kernel32

DeleteVolumeMountPointA
GetCurrentActCtx
GetEnvironmentStringsW
GetSystemDefaultLCID
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
ReadConsoleW
SetHandleCount
GetConsoleCP
GlobalAlloc
GetFirmwareEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
Sleep
GetProcessHandleCount
GetSystemWindowsDirectoryA
GetFileAttributesA
FindNextVolumeW
SetConsoleCursorPosition
GetAtomNameW
SetLastError
GetProcAddress
VirtualAlloc
BackupWrite
EnumDateFormatsExA
EnterCriticalSection
VirtualAllocEx
LoadLibraryA
SetConsoleWindowInfo
GetDefaultCommConfigA
SetConsoleCursorInfo
RequestDeviceWakeup
GetConsoleTitleW
QueryPerformanceFrequency
DuplicateHandle
DeleteAtom
lstrcpyW
LCMapStringW
CreateFileW
WriteConsoleW
SetCriticalSectionSpinCount
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
HeapFree
CloseHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
RtlUnwind
SetStdHandle
GetConsoleMode
FlushFileBuffers
HeapSize
HeapReAlloc
MultiByteToWideChar
GetStringTypeW

user32

ClipCursor

advapi32

AdjustTokenPrivileges

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cabb00b08289b9a7c13f43eb8bf20f72

Code Sign

2a:36:6a:ee:52:b1:68:8e:93:00:00:0e:4c:ca:f2:87Certificate

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 6KB - Virtual size: 35KB

.rsrc Size: 110KB - Virtual size: 4.6MB

2a:36:6a:ee:52:b1:68:8e:93:00:00:0e:4c:ca:f2:87
Certificate

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14
Signer

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 6KB - Virtual size: 35KB

.rsrc
Size: 110KB - Virtual size: 4.6MB