JaffaCakes118_bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3

General

Target
JaffaCakes118_bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3
Size 4.3MB
Sample241225-ynmpjavpct
SHA256 bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3
MD5 3f9ab553ee482291a684dd4525823b28
SHA1 488c5d14d26b84c21c446b4f88dc07d68f3d58b0
SHA512 f857541659ec8025bb327338bfe34c89a0e06f345e5118d4739d2c6b8a020686adc05e5455db84f056a9aad16648401d75700e9c0499b46530dd73d95ff02e72
SSDEEP 98304:9ZLROHWQ3GMdRD3xibBBfULFPJc1VKKcpqcFtMtW31iBxfDS:9ZyRzx0BtULyyvtMtW3sB0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3

.exe 4.3MB

JaffaCakes118_bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3

IMPHASH 4f5dc64597ca4f695b16cf6dee89f692
SHA256 bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3
MD5 3f9ab553ee482291a684dd4525823b28
SHA1 488c5d14d26b84c21c446b4f88dc07d68f3d58b0
SHA512 f857541659ec8025bb327338bfe34c89a0e06f345e5118d4739d2c6b8a020686adc05e5455db84f056a9aad16648401d75700e9c0499b46530dd73d95ff02e72
SSDEEP 98304:9ZLROHWQ3GMdRD3xibBBfULFPJc1VKKcpqcFtMtW31iBxfDS:9ZyRzx0BtULyyvtMtW3sB0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ff:31:dd:85:3c:c0:36:46:7c:4a:3c:b9:05:c0:23:a7:b4:08:63:d1:07:35:d2:fa:a7:cc:48:f7:1d:59:84:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10124

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

9919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dalagecos\lof\fon.pdb

kernel32

lstrlenA GetConsoleAliasesLengthW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess SetMailslotInfo GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW HeapQueryInformation CreateTimerQueue GetModuleFileNameW GetTimeZoneInformation ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW EnumDateFormatsExA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA IsWow64Process GlobalGetAtomNameW GetCurrentConsoleFont GetOEMCP GetModuleHandleA GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA CreateThread ReadFile GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetCaretPos RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_bf04a827e1a7d0240e562816a147e1b8045328166ad16d1031447eb16792cce3

PE Signature issue

kernel32

user32

generic