JaffaCakes118_399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb

General

Target
JaffaCakes118_399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb
Size 4.4MB
Sample241227-a4y6hawrax
SHA256 399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb
MD5 2b252b4596491dc91161412e8772a870
SHA1 664f7444a0f20553d02e94d0dde5ca4b78edef30
SHA512 4afd11428bb8e0de936187039d58001524e339e15dbf67d5bb502b0c4e4832713aed63eb75a785228d480e96361ccd2abc4ef32556d5e0f8a1182298283e37f5
SSDEEP 98304:4ELoLpH/sE2wG7UlfzmO2yXJXUtxlKD9PYRfdrhY/VqT7Pzem:holkE1G7UZzmDyXD6drhYLm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb

.exe 4.4MB

JaffaCakes118_399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb

IMPHASH bcd64e2657251d69bf082a6790bd215d
SHA256 399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb
MD5 2b252b4596491dc91161412e8772a870
SHA1 664f7444a0f20553d02e94d0dde5ca4b78edef30
SHA512 4afd11428bb8e0de936187039d58001524e339e15dbf67d5bb502b0c4e4832713aed63eb75a785228d480e96361ccd2abc4ef32556d5e0f8a1182298283e37f5
SSDEEP 98304:4ELoLpH/sE2wG7UlfzmO2yXJXUtxlKD9PYRfdrhY/VqT7Pzem:holkE1G7UZzmDyXD6drhYLm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c4:bb:7c:47:53:ca:79:a9:db:12:e0:ef:de:57:b3:ba:5d:ab:33:a7:de:ed:dc:13:af:57:3d:e8:2e:d6:c6:38

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10188

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cex.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA lstrcpynW SetConsoleCursorPosition GetMailslotInfo ReadFile CreateTimerQueue GetTimeZoneInformation lstrcatA lstrlenW GetConsoleOutputCP InterlockedExchange FillConsoleOutputCharacterW GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc BuildCommDCBAndTimeoutsW SetFileApisToANSI GetOEMCP HeapSetInformation GetConsoleTitleW GetCPInfoExA ReleaseMutex FindFirstVolumeW DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList GetModuleFileNameW LocalUnlock LCMapStringW LCMapStringA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_399ff7773fc9925327b306bbb06b24eb497cee572dc57315e2805a19b4ec8aeb

PE Signature issue

kernel32

user32

generic