JaffaCakes118_b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa

General

Target
JaffaCakes118_b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa
Size 4.3MB
Sample241225-dkdbgawjft
SHA256 b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa
MD5 d6024c3024565940a49d2bd30908b831
SHA1 6f95ba84b729e239085310a3e3565f4bafd7b9e6
SHA512 705ff1e0f54c787ed947dad16cc70cb1ffac98a2942a417bcddf1d68f81c6c68fd5c6f6eaf0da3cbd54aeccdbcc76cb0e85811a40ed4b979040999c2010cc07e
SSDEEP 98304:a96qcTLAqCGRBs2N1NIIVU4FBO5QKq8wg2BfM9qEuwrMBPQC8WX/:MeTLhCG+IVle5Qt8Bz9qE3OT8S
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa

.exe 4.3MB

JaffaCakes118_b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa

IMPHASH 062d438af0a5427d47d2119e831026d3
SHA256 b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa
MD5 d6024c3024565940a49d2bd30908b831
SHA1 6f95ba84b729e239085310a3e3565f4bafd7b9e6
SHA512 705ff1e0f54c787ed947dad16cc70cb1ffac98a2942a417bcddf1d68f81c6c68fd5c6f6eaf0da3cbd54aeccdbcc76cb0e85811a40ed4b979040999c2010cc07e
SSDEEP 98304:a96qcTLAqCGRBs2N1NIIVU4FBO5QKq8wg2BfM9qEuwrMBPQC8WX/:MeTLhCG+IVle5Qt8Bz9qE3OT8S
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d2:71:d0:5f:78:4e:9d:46:df:3d:10:22:c3:d2:55:bb:57:dd:85:e3:41:bd:20:3f:79:c3:dc:8e:3f:01:9b:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10051

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

7365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wanazicaginu\nijidulal xefiwo_bizi\pili.pdb

kernel32

InterlockedIncrement GetEnvironmentStringsW WaitForSingleObject SetEvent GetSystemTimeAsFileTime CancelDeviceWakeupRequest FindActCtxSectionStringA GetCommandLineA WriteFileGather EnumResourceTypesA GlobalAlloc SizeofResource SetConsoleCP LeaveCriticalSection GetFileAttributesW ReadFile GetProcAddress FreeUserPhysicalPages VerLanguageNameW PrepareTape GetProcessId RemoveDirectoryW GetModuleFileNameA GetModuleHandleA FindFirstVolumeA EndUpdateResourceA LocalSize AddConsoleAliasA LocalFree FindNextVolumeA lstrcpyW GetLocaleInfoA WriteConsoleW GetLastError HeapReAlloc HeapAlloc GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind FlushFileBuffers LoadLibraryA WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize CreateFileA CloseHandle

user32

GetCursorPos

gdi32

GetCharWidthFloatW

advapi32

CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_b602c5fc1e94f77f77b433c58e8080b9a1c6cb2920853c2ac691c0afbf8c2afa

PE Signature issue

kernel32

user32

gdi32

advapi32

generic