JaffaCakes118_f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c

General

Target
JaffaCakes118_f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c
Size 4.3MB
Sample241224-va7k1asmhm
SHA256 f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c
MD5 86e027c2cad46daec7f75e5e80062d18
SHA1 9b0d03e995502f4f5f81da075d1c5ddbfbbda2f0
SHA512 6ed30b50e00c123ba24840208d24272cffd3e2e512c0ac73530159d98b6596e61910ff905ab378d3d8cf39ff1b4b977b23985b7147e5941f9676fc40a3023f1f
SSDEEP 98304:vWOoCaLeHS9C/EMcUHCe+QTyuUCYQ94SncTg9fEQm:2CaKS9w5na6yK/94ScTcfm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c

.exe 4.3MB

JaffaCakes118_f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c

IMPHASH 55ae6049290b1a231db6697392c2b841
SHA256 f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c
MD5 86e027c2cad46daec7f75e5e80062d18
SHA1 9b0d03e995502f4f5f81da075d1c5ddbfbbda2f0
SHA512 6ed30b50e00c123ba24840208d24272cffd3e2e512c0ac73530159d98b6596e61910ff905ab378d3d8cf39ff1b4b977b23985b7147e5941f9676fc40a3023f1f
SSDEEP 98304:vWOoCaLeHS9C/EMcUHCe+QTyuUCYQ94SncTg9fEQm:2CaKS9w5na6yK/94ScTcfm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e8:25:f9:4a:19:8f:0f:de:01:31:4f:cb:2a:0f:29:85:5f:dc:67:02:a6:0a:b4:d6:b8:b3:12:bd:f1:20:a1:3d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 12, 2024

Minor OS version

1

Major OS version

5

Entry point

4292832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gezezuwi\jivana\fimofe\yetikavejudi\xececosa1-xoler.pdb

kernel32

GetFullPathNameA LocalUnlock GetPrivateProfileSectionNamesW EnumResourceNamesW SetCriticalSectionSpinCount GlobalMemoryStatus FindResourceA FindFirstFileW SetThreadContext FindFirstChangeNotificationW EnumCalendarInfoA WriteConsoleInputW SetFilePointer IsBadStringPtrW EnumDateFormatsExW CopyFileExW TlsGetValue GetStringTypeA UnmapViewOfFile MoveFileExA CommConfigDialogA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA SetUnhandledExceptionFilter MoveFileExW InterlockedDecrement GetCurrentProcess SetDefaultCommConfigW SetFirmwareEnvironmentVariableA QueryDosDeviceA GlobalLock SetVolumeMountPointW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA GetFileAttributesExA FreeEnvironmentStringsA _lclose GetModuleHandleW GetCommConfig GetProcessHeap IsBadReadPtr GetSystemTimeAsFileTime GetNumberFormatA GetPrivateProfileStringW GetConsoleTitleA CreateRemoteThread GetCompressedFileSizeW ReadConsoleOutputA WaitNamedPipeW EnumTimeFormatsA SetCommState GetSystemWow64DirectoryA WriteFileGather TzSpecificLocalTimeToSystemTime TlsSetValue AllocateUserPhysicalPages FindResourceExA LoadLibraryW GetConsoleMode FatalAppExitW GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoW GetCalendarInfoA SetSystemTimeAdjustment GetProcessHandleCount GetSystemWindowsDirectoryA GetVersionExW SetConsoleCP LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte GetModuleFileNameW CreateActCtxA GetComputerNameA lstrcmpW lstrlenW WritePrivateProfileStringW VirtualUnlock CreateJobObjectA GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW VerifyVersionInfoW InterlockedExchange FindFirstFileA OpenMutexW GetLastError ChangeTimerQueueTimer GetLongPathNameW SetLastError ReadConsoleOutputCharacterA GetProcAddress HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateJobSet SetStdHandle EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetNumaHighestNodeNumber GetPrivateProfileStringA GetAtomNameA LoadLibraryA Process32FirstW OpenMutexA CreateSemaphoreW ProcessIdToSessionId LocalAlloc CreateHardLinkW IsSystemResumeAutomatic GetExitCodeThread SetCurrentDirectoryW SetFileApisToANSI PostQueuedCompletionStatus GetCurrentConsoleFont HeapWalk GetPrivateProfileStructA SetNamedPipeHandleState SetEnvironmentVariableA GetModuleFileNameA GetDefaultCommConfigA WriteProfileStringA EnumDateFormatsA CreateIoCompletionPort WaitCommEvent SetConsoleTitleW FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent lstrcatW HeapSetInformation FreeEnvironmentStringsW FindNextFileW WriteProfileStringW VirtualProtect EnumDateFormatsW CompareStringA WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle FindFirstVolumeA TerminateJobObject CloseHandle DeleteTimerQueueTimer GlobalAddAtomW SetFileValidData GetTempPathA FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx InterlockedPushEntrySList TlsFree CopyFileExA DeleteFileA lstrcpyA GetBinaryTypeW ExitProcess MoveFileA GetCommandLineW GetStartupInfoW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection DecodePointer UnhandledExceptionFilter IsDebuggerPresent EncodePointer QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId InterlockedIncrement GetEnvironmentStringsW TlsAlloc HeapCreate WriteFile WideCharToMultiByte GetConsoleCP WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapQueryInformation HeapFree FlushFileBuffers IsProcessorFeaturePresent GetStringTypeW LCMapStringW ReadFile CreateFileW RaiseException

advapi32

GetFileSecurityA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_f18bd915e0cbcca20e5a4a4ac0f78345fef0390fbbd3b01775e1c2d34a9c706c

PE Signature issue

kernel32

advapi32

generic