JaffaCakes118_6062dae37ff2335dc0cc9838fc8f0f83f6664686b846c0e1b9758325077af3e8

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_6062dae37ff2335dc0cc9838fc8f0f83f6664686b846c0e1b9758325077af3e8
Size

4.3MB
MD5

cfe2d3c117d3eec1dccef98054c3f556
SHA1

56c2b8060c6a032816c1a2d4ff10040b8cf4ecaf
SHA256

6062dae37ff2335dc0cc9838fc8f0f83f6664686b846c0e1b9758325077af3e8
SHA512

fe96e84cc26d740968d635dfefb241189827122c45a3f6f36b05da45cdc3756c60ac42b4f3fe1bb7328b99be8de2f17d9f9e431eb6c8f3a0718779c76d932f97
SSDEEP

98304:bF79OkVFCjVtvIzzRzHO+5HCUnsiPEZ/dyOY/JuMYOovpVQnJlFymMk6:bXOljLvIzVbF5lPU/xi3Y3punBkZ

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_6062dae37ff2335dc0cc9838fc8f0f83f6664686b846c0e1b9758325077af3e8
.exe windows:5 windows x86 arch:x86

e0383fee3aa7c9c4dbf3a05a98d01075

Code Sign

d2:c3:4a:33:93:ad:7e:53:3c:1d:bd:85:12:6b:f0:9f
Certificate

Issuer

POSTALCODE=10051

Not Before

23-09-2021 08:08

Not After

23-09-2022 08:08

Subject

POSTALCODE=10051

4c:99:0f:8b:93:b6:1c:e9:a7:e1:69:70:d4:d7:3b:4c:65:b5:be:66:ad:8f:17:51:52:54:74:37:20:d2:45:11
Signer

Actual PE Digest

4c:99:0f:8b:93:b6:1c:e9:a7:e1:69:70:d4:d7:3b:4c:65:b5:be:66:ad:8f:17:51:52:54:74:37:20:d2:45:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dimov\tivayeg\to.pdb

Imports

kernel32

InterlockedDecrement
GlobalSize
GetEnvironmentStringsW
WaitForSingleObject
SetEvent
GetSystemDefaultLCID
FindActCtxSectionStringA
GlobalAlloc
LeaveCriticalSection
GetModuleFileNameW
GetDevicePowerState
ReleaseSemaphore
GetConsoleOutputCP
LoadResource
GetProcAddress
VerLanguageNameA
RemoveDirectoryA
EnterCriticalSection
WriteConsoleA
GetProcessId
LockResource
BeginUpdateResourceA
GlobalGetAtomNameW
SetSystemTime
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
EraseTape
EndUpdateResourceA
GetWindowsDirectoryW
FindFirstVolumeW
AddConsoleAliasA
lstrcpyA
GetLocaleInfoA
GetCommandLineW
GetSystemDefaultLangID
HeapAlloc
GetLastError
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
CreateFileA

user32

RealChildWindowFromPoint

gdi32

GetCharWidthFloatW

advapi32

DeregisterEventSource
CloseEventLog

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0383fee3aa7c9c4dbf3a05a98d01075

Code Sign

d2:c3:4a:33:93:ad:7e:53:3c:1d:bd:85:12:6b:f0:9fCertificate

4c:99:0f:8b:93:b6:1c:e9:a7:e1:69:70:d4:d7:3b:4c:65:b5:be:66:ad:8f:17:51:52:54:74:37:20:d2:45:11Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 9KB - Virtual size: 534KB

.rsrc Size: 32KB - Virtual size: 4.4MB

d2:c3:4a:33:93:ad:7e:53:3c:1d:bd:85:12:6b:f0:9f
Certificate

4c:99:0f:8b:93:b6:1c:e9:a7:e1:69:70:d4:d7:3b:4c:65:b5:be:66:ad:8f:17:51:52:54:74:37:20:d2:45:11
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 9KB - Virtual size: 534KB

.rsrc
Size: 32KB - Virtual size: 4.4MB