JaffaCakes118_a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb

General

Target
JaffaCakes118_a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb
Size 4.4MB
Sample241226-y8pdvsynbm
SHA256 a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb
MD5 ca6d15fb9dc13b6405aa77bbdee1998f
SHA1 960b184621a2838dbe0e98030f6fce8e93b09721
SHA512 7f0e0d05fa0c8ffe45bd23e3f58ec5b552ca6b7e7f1c2b176b7e669a6b1e2616c5327c6b4fead7cda5b7087b0ac7b3342dd926e1b3c0e4df667e753bcad4beff
SSDEEP 98304:tJtY3JeI6vJKJ9vQzp1wkGq+I3TQ2lilTNw:tJtoJt6vQhQzp1wkGf4Dei
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb

.exe 4.4MB

JaffaCakes118_a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb

IMPHASH a25c87192fb3475e29bf41bd882aef06
SHA256 a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb
MD5 ca6d15fb9dc13b6405aa77bbdee1998f
SHA1 960b184621a2838dbe0e98030f6fce8e93b09721
SHA512 7f0e0d05fa0c8ffe45bd23e3f58ec5b552ca6b7e7f1c2b176b7e669a6b1e2616c5327c6b4fead7cda5b7087b0ac7b3342dd926e1b3c0e4df667e753bcad4beff
SSDEEP 98304:tJtY3JeI6vJKJ9vQzp1wkGq+I3TQ2lilTNw:tJtoJt6vQhQzp1wkGf4Dei
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a5:24:8f:cc:b5:45:66:ca:04:87:50:a4:ba:1d:c0:f9:00:d7:85:9d:b4:6b:82:66:e2:cd:13:ba:02:e2:17:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

11296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\feyaga_januhuxiyuneg\mav.pdb

kernel32

DosDateTimeToFileTime FindFirstChangeNotificationW lstrlenA CopyFileExW SetLocalTime GetCPInfo InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA InterlockedDecrement CompareFileTime GlobalSize GetNamedPipeHandleStateA CreateDirectoryW GlobalLock CancelWaitableTimer GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile SetCommState GetCommandLineA TlsSetValue GetPrivateProfileIntA LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW IsProcessorFeaturePresent TerminateProcess GetStartupInfoW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress SetFirmwareEnvironmentVariableW SearchPathA OpenWaitableTimerA LoadLibraryA Process32FirstW LocalAlloc GetFileType WritePrivateProfileStringA CreateFileMappingW SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk SetEnvironmentVariableA GetThreadPriority QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW RequestWakeupLatency FindAtomW ReadConsoleOutputCharacterW GetProfileSectionW DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringW GetStringTypeA GetLocaleInfoA CloseHandle CreateFileA

user32

GetComboBoxInfo

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_a0d0a5f4242b26cb40c54af0c9abbf31a76c7e3a962a023d1231c076f36e66fb

PE Signature issue

kernel32

user32

msimg32

generic