JaffaCakes118_4bde88345e13fd4d8bb5efba49e52b020e9c234500f1dc7ef87569777a054216

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_4bde88345e13fd4d8bb5efba49e52b020e9c234500f1dc7ef87569777a054216
Size

4.5MB
MD5

dfec12e303f2ac650f638c25e00645cc
SHA1

9f5ee21dc613413d46b7135fe1abb082663261ac
SHA256

4bde88345e13fd4d8bb5efba49e52b020e9c234500f1dc7ef87569777a054216
SHA512

ad15577efce512bc50446150b5cc91ea7ce1f6bca6cb62b62cf2a6addb65ad52db86b3334d7e08f08a4fdd3abd900f080bcdeb1cb85448a12cf47e70b5bc9f3e
SSDEEP

98304:L8w/8Gv20OeoTYUBzgeH92gMdbNxMItArGZBL8+MALk1:LB8GvryBzvH9GbNxorGBL8+Mf1

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_4bde88345e13fd4d8bb5efba49e52b020e9c234500f1dc7ef87569777a054216
.exe windows:5 windows x86 arch:x86

b1b885c79a320057d1e4a25dd2f0a59a

Code Sign

87:ac:40:1a:92:d5:6a:ed:1e:00:6b:45:ac:b4:36:a8
Certificate

Issuer

POSTALCODE=10051

Not Before

31-08-2021 09:02

Not After

31-08-2022 09:02

Subject

POSTALCODE=10051

4b:c5:d5:6d:9a:44:10:f8:0b:c5:cc:d9:93:2c:7e:94:f8:af:85:92:75:72:e2:59:c9:b3:fd:5a:a6:7c:bd:73
Signer

Actual PE Digest

4b:c5:d5:6d:9a:44:10:f8:0b:c5:cc:d9:93:2c:7e:94:f8:af:85:92:75:72:e2:59:c9:b3:fd:5a:a6:7c:bd:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\saluf.pdb

Imports

kernel32

EnumResourceNamesW
GetFileSize
GetNativeSystemInfo
lstrlenA
GetStringTypeA
SetLocalTime
FindResourceExW
GetQueuedCompletionStatus
InterlockedDecrement
GetNamedPipeHandleStateA
GlobalLock
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
IsBadReadPtr
GetSystemTimeAsFileTime
GetPrivateProfileStringW
ReadConsoleW
WriteFile
SetCommState
GetCommandLineA
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
CopyFileW
GetSystemWindowsDirectoryA
GetConsoleAliasExesLengthW
IsDBCSLeadByte
GetStartupInfoW
GlobalUnlock
LCMapStringA
InterlockedExchange
SetCurrentDirectoryA
GetStartupInfoA
GetCPInfoExW
GetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
WriteProfileSectionA
LoadLibraryA
CreateSemaphoreW
HeapWalk
FindAtomA
Process32NextW
CreateIoCompletionPort
FreeEnvironmentStringsW
EnumResourceNamesA
GetCurrentThreadId
TlsAlloc
DeleteFileW
CopyFileExA
MultiByteToWideChar
HeapValidate
RaiseException
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
GetModuleFileNameW
InterlockedIncrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapSize
HeapReAlloc
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
RtlUnwind
DebugBreak
OutputDebugStringA
OutputDebugStringW
LCMapStringW
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
FlushFileBuffers
GetModuleHandleA

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.2MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1b885c79a320057d1e4a25dd2f0a59a

Code Sign

87:ac:40:1a:92:d5:6a:ed:1e:00:6b:45:ac:b4:36:a8Certificate

4b:c5:d5:6d:9a:44:10:f8:0b:c5:cc:d9:93:2c:7e:94:f8:af:85:92:75:72:e2:59:c9:b3:fd:5a:a6:7c:bd:73Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 140KB - Virtual size: 140KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 4.2MB - Virtual size: 5.1MB

.rsrc Size: 53KB - Virtual size: 3.9MB

87:ac:40:1a:92:d5:6a:ed:1e:00:6b:45:ac:b4:36:a8
Certificate

4b:c5:d5:6d:9a:44:10:f8:0b:c5:cc:d9:93:2c:7e:94:f8:af:85:92:75:72:e2:59:c9:b3:fd:5a:a6:7c:bd:73
Signer

.text
Size: 140KB - Virtual size: 140KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 4.2MB - Virtual size: 5.1MB

.rsrc
Size: 53KB - Virtual size: 3.9MB