JaffaCakes118_0972749b8d9f9a8d4ae2fea4d2c85cb54ac8692a07c9380e8ee56ebc5b90a03d

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_0972749b8d9f9a8d4ae2fea4d2c85cb54ac8692a07c9380e8ee56ebc5b90a03d
Size

4.2MB
MD5

97b04abfce870b76fe368292da8e1fbb
SHA1

2b7a2b26ea62fe0883434e2082ab38d350e5cb1b
SHA256

0972749b8d9f9a8d4ae2fea4d2c85cb54ac8692a07c9380e8ee56ebc5b90a03d
SHA512

e28dd055e24410a2dac70a9c375f6b0947015fa5701f6f2fab4cf0ffe2fdd47a749abb000bc2f0a44720d3f15945b19bb0f2e38b2908c1a01e027c06fb469bcc
SSDEEP

98304:TVeAUmU0pHYOw4V7YYoutzvkUas7ulRJLUF:TMAUm4OFVUwozRRu

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_0972749b8d9f9a8d4ae2fea4d2c85cb54ac8692a07c9380e8ee56ebc5b90a03d
.exe windows:5 windows x86 arch:x86

c53a5a8e9ef3dbd0aff245de270c9709

Code Sign

1c:b0:1e:ea:40:b8:e7:64:f0:21:56:e5:64:15:83:64
Certificate

Issuer

POSTALCODE=10301

Not Before

24-11-2021 09:10

Not After

24-11-2022 09:10

Subject

POSTALCODE=10301

bb:c8:d5:5f:fc:87:3a:88:5b:01:db:18:93:89:04:1f:ac:65:b3:a5:95:5e:4d:24:3b:02:4d:10:b6:fe:2c:5e
Signer

Actual PE Digest

bb:c8:d5:5f:fc:87:3a:88:5b:01:db:18:93:89:04:1f:ac:65:b3:a5:95:5e:4d:24:3b:02:4d:10:b6:fe:2c:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\yomujitozica-waxalaw_xonim tasuvivar\cahesusax.pdb

Imports

kernel32

SetEndOfFile
GetEnvironmentStringsW
SetHandleInformation
WaitForSingleObject
CreateHardLinkA
EnumCalendarInfoExW
GetConsoleAliasesA
GetConsoleAliasesLengthA
GetSystemTimeAsFileTime
GlobalAlloc
GetLocaleInfoW
HeapValidate
GetFileAttributesW
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
GetFirmwareEnvironmentVariableW
LoadLibraryA
EnumResourceTypesW
EnumDateFormatsA
FindNextFileW
GetConsoleTitleW
FillConsoleOutputAttribute
CheckRemoteDebuggerPresent
CommConfigDialogW
WriteConsoleW
HeapReAlloc
IsProcessorFeaturePresent
DecodePointer
EncodePointer
GetModuleHandleW
ExitProcess
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
LoadLibraryW
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
Sleep
SetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
RaiseException
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CreateFileW

user32

SetCaretPos

ole32

CoGetMalloc

msimg32

TransparentBlt

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c53a5a8e9ef3dbd0aff245de270c9709

Code Sign

1c:b0:1e:ea:40:b8:e7:64:f0:21:56:e5:64:15:83:64Certificate

bb:c8:d5:5f:fc:87:3a:88:5b:01:db:18:93:89:04:1f:ac:65:b3:a5:95:5e:4d:24:3b:02:4d:10:b6:fe:2c:5eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

msimg32

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 6KB - Virtual size: 25KB

.rsrc Size: 30KB - Virtual size: 4.6MB

1c:b0:1e:ea:40:b8:e7:64:f0:21:56:e5:64:15:83:64
Certificate

bb:c8:d5:5f:fc:87:3a:88:5b:01:db:18:93:89:04:1f:ac:65:b3:a5:95:5e:4d:24:3b:02:4d:10:b6:fe:2c:5e
Signer

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 6KB - Virtual size: 25KB

.rsrc
Size: 30KB - Virtual size: 4.6MB