JaffaCakes118_91903c4f75bce2fe2256e79e601c0aaeb7d7b17a2a7844286073559edafbf934

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_91903c4f75bce2fe2256e79e601c0aaeb7d7b17a2a7844286073559edafbf934
Size

4.3MB
MD5

376d41f3831bd43a9b2d6b4f7c032f88
SHA1

ef0b8ef8a0eef1f5bb84160eb02de2859e201dfa
SHA256

91903c4f75bce2fe2256e79e601c0aaeb7d7b17a2a7844286073559edafbf934
SHA512

7753fc8e067eb9a4f7475000a8686f4be10b71cec44ee25ccc7fc866693464786b3df9c32f811e1c1d39bce472b510e251704e47f75745efaba6c1ce6f3539aa
SSDEEP

98304:PhhiFXj8iHCI0F3A0B717JaIO1/nH1veYYSv8bQaQiJh:ZhiFjCbQ0VeIaDSQo

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_91903c4f75bce2fe2256e79e601c0aaeb7d7b17a2a7844286073559edafbf934
.exe windows:5 windows x86 arch:x86

f98cc9327e2d65cc6189a693f26e1c1d

Code Sign

5b:a4:13:eb:e7:ab:d2:0f:85:19:a7:20:68:45:a8:05
Certificate

Issuer

POSTALCODE=10051

Not Before

27-09-2021 17:48

Not After

27-09-2022 17:48

Subject

POSTALCODE=10051

4d:d6:06:39:57:36:c1:94:73:13:3f:53:a8:6a:f5:b3:ba:99:56:62:61:84:a1:8e:a9:54:4e:c1:7f:c5:12:c6
Signer

Actual PE Digest

4d:d6:06:39:57:36:c1:94:73:13:3f:53:a8:6a:f5:b3:ba:99:56:62:61:84:a1:8e:a9:54:4e:c1:7f:c5:12:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\moyusuxege\jutuj-jefiwesihiles98\lelawavijosali\gunozilotuw.pdb

Imports

kernel32

HeapReAlloc
GetLocaleInfoA
LoadResource
InterlockedIncrement
GetEnvironmentStringsW
AddConsoleAliasW
SetEvent
OpenSemaphoreA
GetSystemTimeAsFileTime
GetCommandLineA
WriteFileGather
CreateActCtxW
GetEnvironmentStrings
LeaveCriticalSection
GetFileAttributesA
ReadFile
GetDevicePowerState
GetProcAddress
FreeUserPhysicalPages
VerLanguageNameW
WriteConsoleA
GetProcessId
LocalAlloc
RemoveDirectoryW
GlobalGetAtomNameW
WaitForMultipleObjects
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
EraseTape
GetStringTypeW
ReleaseMutex
EndUpdateResourceA
LocalSize
FindFirstVolumeW
FindNextVolumeA
lstrcpyW
HeapAlloc
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetLastError
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
CloseHandle
CreateFileA

user32

GetCursorPos

Exports

Exports

@SetViceVariants@12

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f98cc9327e2d65cc6189a693f26e1c1d

Code Sign

5b:a4:13:eb:e7:ab:d2:0f:85:19:a7:20:68:45:a8:05Certificate

4d:d6:06:39:57:36:c1:94:73:13:3f:53:a8:6a:f5:b3:ba:99:56:62:61:84:a1:8e:a9:54:4e:c1:7f:c5:12:c6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 7KB - Virtual size: 533KB

.rsrc Size: 42KB - Virtual size: 4.4MB

5b:a4:13:eb:e7:ab:d2:0f:85:19:a7:20:68:45:a8:05
Certificate

4d:d6:06:39:57:36:c1:94:73:13:3f:53:a8:6a:f5:b3:ba:99:56:62:61:84:a1:8e:a9:54:4e:c1:7f:c5:12:c6
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 7KB - Virtual size: 533KB

.rsrc
Size: 42KB - Virtual size: 4.4MB