JaffaCakes118_dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0

General

Target
JaffaCakes118_dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0
Size 4.2MB
Sample241229-cma4fsyph1
SHA256 dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0
MD5 9f1ab1a21b49b45fcb5f71d99bc40221
SHA1 b7396dbbeb861bb715323ddabb80a0c67175d43c
SHA512 a2a7087f325b82db6834cabc28a36ee0275e4a71e941bd6dbf948b738afd27e5cc4b035b29fd11c3032547fc9f8ee2b1c524adb230fafaaf7901ad3358a6c098
SSDEEP 98304:opcVLEdbspnTRwtTiVXfkaqPz5teYjfUzuoRTwEWVL:miLYYBT6tTyfkaqPz5teush0VL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0

.exe 4.2MB

JaffaCakes118_dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0
MD5 9f1ab1a21b49b45fcb5f71d99bc40221
SHA1 b7396dbbeb861bb715323ddabb80a0c67175d43c
SHA512 a2a7087f325b82db6834cabc28a36ee0275e4a71e941bd6dbf948b738afd27e5cc4b035b29fd11c3032547fc9f8ee2b1c524adb230fafaaf7901ad3358a6c098
SSDEEP 98304:opcVLEdbspnTRwtTiVXfkaqPz5teYjfUzuoRTwEWVL:miLYYBT6tTyfkaqPz5teush0VL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

78:0a:8b:d1:24:9f:76:88:c8:af:d5:09:e6:5c:fd:ce:80:cc:21:e2:45:a9:f4:b6:f7:cf:36:53:36:8e:41:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

29936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kacohilihuza\96\bizidikiwi9_figesej.pdb

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_dab1cdfff06dd63d42d0917c0b304ef5f45546de99b46fb04910fdc5dd8b0ee0

PE Signature issue

kernel32

advapi32

ole32

generic