JaffaCakes118_60e244759e7ea7ee3db3202de54483a137279b4536c915ae18678ebc2d9bf7d5

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_60e244759e7ea7ee3db3202de54483a137279b4536c915ae18678ebc2d9bf7d5
Size

4.3MB
MD5

494acb86dbddc55b19cd43ae3d63a0ec
SHA1

8ca041479678a4ab98c205145cc39d82d038837b
SHA256

60e244759e7ea7ee3db3202de54483a137279b4536c915ae18678ebc2d9bf7d5
SHA512

135185b87dcebd32f04153c537cf64683c4cc0eb2c654fcfc5da5346a645dd63c5341d765991832a5e3684f9a7058967c9d7bcf94f8b28015cfb571de005cb2b
SSDEEP

98304:6/RtRsIRQCFflucqqhtMESfbidYy0YkN1WOPJlWxxphprfSq:0RtRv3fE0sfbiOy0jBJlWLLhfr

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_60e244759e7ea7ee3db3202de54483a137279b4536c915ae18678ebc2d9bf7d5
.exe windows:5 windows x86 arch:x86

9abf03d4e22c0a12cb29c8d67fb192e4

Code Sign

94:c8:92:a0:4a:f9:ac:06:08:f8:fe:ef:43:36:f9:10
Certificate

Issuer

POSTALCODE=10301

Not Before

18-11-2021 16:06

Not After

18-11-2022 16:06

Subject

POSTALCODE=10301

85:70:7d:a9:bf:c7:20:82:83:28:d2:aa:97:e6:f8:07:f8:4a:9d:ed:05:33:24:fd:db:43:30:b3:df:10:3a:ee
Signer

Actual PE Digest

85:70:7d:a9:bf:c7:20:82:83:28:d2:aa:97:e6:f8:07:f8:4a:9d:ed:05:33:24:fd:db:43:30:b3:df:10:3a:ee

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\wonigavetu\galofe_suv\videwoneyepe\fozi kekaxeka\kiwudapis.pdb

Imports

kernel32

lstrlenA
CopyFileExW
InterlockedIncrement
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
SetHandleInformation
CancelWaitableTimer
GetComputerNameW
GetModuleHandleW
GetProcessHeap
GetConsoleAliasesLengthA
ConvertFiberToThread
ReadConsoleW
GetCompressedFileSizeW
GetSystemWow64DirectoryA
TlsSetValue
LoadLibraryW
GetConsoleMode
SetVolumeMountPointA
GetVersionExW
HeapCreate
SetDllDirectoryA
HeapValidate
GetVolumePathNamesForVolumeNameW
VerifyVersionInfoA
IsDBCSLeadByte
GetModuleFileNameW
CreateActCtxA
GetEnvironmentVariableA
CompareStringW
WriteConsoleInputW
WritePrivateProfileStringW
VerifyVersionInfoW
SetCurrentDirectoryA
FindFirstFileExA
GetLastError
GetLongPathNameW
SetLastError
BackupRead
SetFirmwareEnvironmentVariableW
CreateNamedPipeA
FindClose
GetPrivateProfileStringA
ProcessIdToSessionId
LocalAlloc
GetModuleFileNameA
_lread
GetProcessShutdownParameters
FreeEnvironmentStringsW
WriteProfileStringW
BuildCommDCBA
VirtualProtect
GetConsoleCursorInfo
GetSystemRegistryQuota
ReadConsoleInputW
FileTimeToLocalFileTime
CreateWaitableTimerA
GetSystemTime
TlsFree
CommConfigDialogW
GetACP
SearchPathW
CloseHandle
CreateFileW
FlushFileBuffers
SetStdHandle
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedDecrement
DecodePointer
GetProcAddress
ExitProcess
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
IsBadReadPtr
EncodePointer
TlsAlloc
TlsGetValue
WriteFile
GetOEMCP
GetCPInfo
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
RaiseException

gdi32

GetBitmapBits

winhttp

WinHttpReadData

msimg32

GradientFill

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zohumin
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kucice
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9abf03d4e22c0a12cb29c8d67fb192e4

Code Sign

94:c8:92:a0:4a:f9:ac:06:08:f8:fe:ef:43:36:f9:10Certificate

85:70:7d:a9:bf:c7:20:82:83:28:d2:aa:97:e6:f8:07:f8:4a:9d:ed:05:33:24:fd:db:43:30:b3:df:10:3a:eeSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

winhttp

msimg32

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.data Size: 4KB - Virtual size: 12.3MB

.zohumin Size: 1KB - Virtual size: 4KB

.kucice Size: 512B - Virtual size: 75B

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 52KB - Virtual size: 52KB

94:c8:92:a0:4a:f9:ac:06:08:f8:fe:ef:43:36:f9:10
Certificate

85:70:7d:a9:bf:c7:20:82:83:28:d2:aa:97:e6:f8:07:f8:4a:9d:ed:05:33:24:fd:db:43:30:b3:df:10:3a:ee
Signer

.text
Size: 4.2MB - Virtual size: 4.2MB

.data
Size: 4KB - Virtual size: 12.3MB

.zohumin
Size: 1KB - Virtual size: 4KB

.kucice
Size: 512B - Virtual size: 75B

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 52KB - Virtual size: 52KB