JaffaCakes118_9c5e669dde0168308577c510fecebbf2a463f83cce00b641879d14a61a01de46

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_9c5e669dde0168308577c510fecebbf2a463f83cce00b641879d14a61a01de46
Size

4.1MB
MD5

7d6dd9d33549357d7363273bb210da1b
SHA1

0ba670a44fc4c67449c670311e307e65cc7ce363
SHA256

9c5e669dde0168308577c510fecebbf2a463f83cce00b641879d14a61a01de46
SHA512

e9dcbad4b31bd6cded7674c8357b1ab7642a331c502e653574a39594c0e4eaaf7c5f2a70839518ac5b38568b22562b0b89c7f0cb89494c89aa8da7e7e7b36b43
SSDEEP

98304:YM944aDzlsEqnhqJtyM1ahZ0ifqa8hDYVcztLR1X13+0xGojtaz0f3d:v98Bs/iRagYqVhcmztl/+UDsz0f3d

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_9c5e669dde0168308577c510fecebbf2a463f83cce00b641879d14a61a01de46
.exe windows:5 windows x86 arch:x86

f07757163332cdbf737bafdb4614222c

Code Sign

52:11:57:8e:0b:6b:0b:e3:74:27:48:63:33:12:83:5c
Certificate

Issuer

POSTALCODE=10305

Not Before

11-10-2022 07:32

Not After

11-10-2023 07:32

Subject

POSTALCODE=10305

27:54:1a:16:88:00:0a:39:1d:20:33:a3:cd:79:ab:19:23:85:c7:03:80:08:66:ec:05:cc:88:68:42:9e:af:a0
Signer

Actual PE Digest

27:54:1a:16:88:00:0a:39:1d:20:33:a3:cd:79:ab:19:23:85:c7:03:80:08:66:ec:05:cc:88:68:42:9e:af:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cosoba69_dudebe29.pdb

Imports

kernel32

GetConsoleAliasesW
ReadFile
ReadConsoleW
GetVolumeInformationA
GetComputerNameW
LocalFree
InterlockedDecrement
GetSystemTimeAdjustment
SetLocaleInfoW
FindNextVolumeA
FindCloseChangeNotification
EnumSystemCodePagesW
FindNextFileA
CopyFileExA
MoveFileWithProgressA
VerifyVersionInfoW
LocalSize
DosDateTimeToFileTime
DebugBreak
GlobalGetAtomNameA
IsBadWritePtr
FindResourceW
GetComputerNameExA
GetProcAddress
GetStringTypeW
GetFileTime
GetConsoleAliasesLengthW
DeleteVolumeMountPointA
GetPrivateProfileStructA
GetOEMCP
GetQueuedCompletionStatus
InterlockedPopEntrySList
lstrcpynW
WriteConsoleA
GetBinaryTypeW
WriteConsoleOutputA
GetCommandLineA
CreateActCtxA
FormatMessageW
GetModuleHandleA
EnterCriticalSection
GetComputerNameA
GetStringTypeExW
OpenMutexW
LocalFlags
RtlCaptureContext
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStructW
DeleteFiber
InterlockedExchangeAdd
EnumDateFormatsW
EnumCalendarInfoA
GetConsoleAliasExesLengthW
OpenSemaphoreA
InterlockedIncrement
GetNamedPipeHandleStateW
RegisterWaitForSingleObject
LocalAlloc
GetLogicalDriveStringsA
SetLastError
CopyFileW
LoadLibraryA
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileA
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f07757163332cdbf737bafdb4614222c

Code Sign

52:11:57:8e:0b:6b:0b:e3:74:27:48:63:33:12:83:5cCertificate

27:54:1a:16:88:00:0a:39:1d:20:33:a3:cd:79:ab:19:23:85:c7:03:80:08:66:ec:05:cc:88:68:42:9e:af:a0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 117KB - Virtual size: 116KB

.data Size: 3.9MB - Virtual size: 5.3MB

.rsrc Size: 20KB - Virtual size: 3.2MB

52:11:57:8e:0b:6b:0b:e3:74:27:48:63:33:12:83:5c
Certificate

27:54:1a:16:88:00:0a:39:1d:20:33:a3:cd:79:ab:19:23:85:c7:03:80:08:66:ec:05:cc:88:68:42:9e:af:a0
Signer

.text
Size: 117KB - Virtual size: 116KB

.data
Size: 3.9MB - Virtual size: 5.3MB

.rsrc
Size: 20KB - Virtual size: 3.2MB