JaffaCakes118_4ef937b284cfc69143301ea53ad9f7a7c4ff92c9c0a693bd6cb9e8d56a56c8d9

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_4ef937b284cfc69143301ea53ad9f7a7c4ff92c9c0a693bd6cb9e8d56a56c8d9
Size

4.3MB
MD5

f50421a528932c3e3a152ba2c8bcc02a
SHA1

146ac3a34278365d421b9deb802cf32ad794dba8
SHA256

4ef937b284cfc69143301ea53ad9f7a7c4ff92c9c0a693bd6cb9e8d56a56c8d9
SHA512

cc7af98c54323c17274dceb81d56ed80ef0ecc054aec2eb4b99d264ebd808a4b408207a8f50248baf48cf73524706c0063ef62bb126919b8d480ba6cf5c0f3ff
SSDEEP

98304:K2dpXaFIOuA8uQSVgy0D6NwWzPclnJ4crjMe91fSn+S9hfpE3sCU4q5eaisEbJW7:tdpqaKQ+l0D6GWe4Ot/fSnv9hfp5P5eM

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_4ef937b284cfc69143301ea53ad9f7a7c4ff92c9c0a693bd6cb9e8d56a56c8d9
.exe windows:5 windows x86 arch:x86

e7d6aacdbba2eaeadcddfcf1af169f5c

Code Sign

6e:d8:e3:4e:af:41:78:4f:39:44:d7:41:51:56:df:6a
Certificate

Issuer

POSTALCODE=10051

Not Before

23-09-2021 09:41

Not After

23-09-2022 09:41

Subject

POSTALCODE=10051

32:b0:de:65:fb:8f:90:da:fa:ae:27:bc:12:e2:03:e9:09:fd:5a:b9:e1:74:d8:19:92:07:c0:4c:75:e9:0b:08
Signer

Actual PE Digest

32:b0:de:65:fb:8f:90:da:fa:ae:27:bc:12:e2:03:e9:09:fd:5a:b9:e1:74:d8:19:92:07:c0:4c:75:e9:0b:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cija4 lagotuja-roco\row-yumahedafih68_hiromamevelabe\b.pdb

Imports

kernel32

InterlockedDecrement
GetEnvironmentStringsW
WaitForSingleObject
SetEvent
GetSystemDefaultLCID
GetEnvironmentStrings
GlobalAlloc
SizeofResource
LeaveCriticalSection
ReadFile
GetModuleFileNameW
GetDevicePowerState
GetConsoleOutputCP
VerLanguageNameA
RemoveDirectoryA
EnterCriticalSection
GlobalGetAtomNameA
PrepareTape
WriteConsoleA
GetProcessId
BeginUpdateResourceA
SetSystemTime
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
FindFirstVolumeA
ReleaseMutex
EndUpdateResourceA
LocalSize
GetWindowsDirectoryW
AddConsoleAliasA
FindActCtxSectionStringW
FindNextVolumeA
lstrcpyA
GetLocaleInfoA
GetCommandLineW
GetProcAddress
GetSystemDefaultLangID
HeapAlloc
GetLastError
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
CreateFileA

user32

RealChildWindowFromPoint

gdi32

GetCharWidthFloatW

advapi32

DeregisterEventSource
CloseEventLog

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7d6aacdbba2eaeadcddfcf1af169f5c

Code Sign

6e:d8:e3:4e:af:41:78:4f:39:44:d7:41:51:56:df:6aCertificate

32:b0:de:65:fb:8f:90:da:fa:ae:27:bc:12:e2:03:e9:09:fd:5a:b9:e1:74:d8:19:92:07:c0:4c:75:e9:0b:08Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 9KB - Virtual size: 534KB

.rsrc Size: 32KB - Virtual size: 4.4MB

6e:d8:e3:4e:af:41:78:4f:39:44:d7:41:51:56:df:6a
Certificate

32:b0:de:65:fb:8f:90:da:fa:ae:27:bc:12:e2:03:e9:09:fd:5a:b9:e1:74:d8:19:92:07:c0:4c:75:e9:0b:08
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 9KB - Virtual size: 534KB

.rsrc
Size: 32KB - Virtual size: 4.4MB