JaffaCakes118_7699557a3dccc92a8347b69997fa548d3fe3009730127ab033498453ad0b9fe7

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_7699557a3dccc92a8347b69997fa548d3fe3009730127ab033498453ad0b9fe7
Size

4.2MB
MD5

77897f57388c60164fef373a1d4d234b
SHA1

f1d7158f73d5d4512a9e6f0412dacaaa6c2d4b69
SHA256

7699557a3dccc92a8347b69997fa548d3fe3009730127ab033498453ad0b9fe7
SHA512

a83cb9a4c97436aa255418368feb1de288ecd7550cadcbf90394e84bb610ceb9586bbd7269b44fe9b4711ebb34de762e01de04f25fb7a7a78a359535022731bc
SSDEEP

98304:eSfJ7mNnRUW9qRsN2ntRB6WmHxoOg8MNurAZ3g:eO1NW9ksNaw9hIurOw

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_7699557a3dccc92a8347b69997fa548d3fe3009730127ab033498453ad0b9fe7
.exe windows:5 windows x86 arch:x86

cabb00b08289b9a7c13f43eb8bf20f72

Code Sign

5a:fb:e9:bc:e8:ea:9a:83:46:8f:3d:36:2f:04:cb:de
Certificate

Issuer

POSTALCODE=10305

Not Before

14/11/2021, 09:07

Not After

14/11/2022, 09:07

Subject

POSTALCODE=10305

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14
Signer

Actual PE Digest

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\now\kivepimogawi\xeruyu90\mapuh_vuc\waheyebizidis\line\r.pdb

Imports

kernel32

DeleteVolumeMountPointA
GetCurrentActCtx
GetEnvironmentStringsW
GetSystemDefaultLCID
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
ReadConsoleW
SetHandleCount
GetConsoleCP
GlobalAlloc
GetFirmwareEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
Sleep
GetProcessHandleCount
GetSystemWindowsDirectoryA
GetFileAttributesA
FindNextVolumeW
SetConsoleCursorPosition
GetAtomNameW
SetLastError
GetProcAddress
VirtualAlloc
BackupWrite
EnumDateFormatsExA
EnterCriticalSection
VirtualAllocEx
LoadLibraryA
SetConsoleWindowInfo
GetDefaultCommConfigA
SetConsoleCursorInfo
RequestDeviceWakeup
GetConsoleTitleW
QueryPerformanceFrequency
DuplicateHandle
DeleteAtom
lstrcpyW
LCMapStringW
CreateFileW
WriteConsoleW
SetCriticalSectionSpinCount
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
HeapFree
CloseHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
RtlUnwind
SetStdHandle
GetConsoleMode
FlushFileBuffers
HeapSize
HeapReAlloc
MultiByteToWideChar
GetStringTypeW

user32

ClipCursor

advapi32

AdjustTokenPrivileges

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cabb00b08289b9a7c13f43eb8bf20f72

Code Sign

5a:fb:e9:bc:e8:ea:9a:83:46:8f:3d:36:2f:04:cb:deCertificate

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 6KB - Virtual size: 35KB

.rsrc Size: 110KB - Virtual size: 4.6MB

5a:fb:e9:bc:e8:ea:9a:83:46:8f:3d:36:2f:04:cb:de
Certificate

a2:c6:20:7c:93:c8:32:c5:b4:2a:3b:f9:9c:cc:87:53:27:56:df:4e:7f:f1:d0:a1:1e:89:e5:af:32:d4:e4:14
Signer

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 6KB - Virtual size: 35KB

.rsrc
Size: 110KB - Virtual size: 4.6MB