JaffaCakes118_bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d

General

Target
JaffaCakes118_bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d
Size 4.1MB
Sample241230-3s2fpsxmfx
SHA256 bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d
MD5 07f69380c87b91bc4b69ff105d470664
SHA1 3ee01d41625262841cf48e08f9a2ef555129a4ee
SHA512 dbbb9f4af07f6d94a2769267299b678d6995c9a73ccc629e8258ae8e5d91ba4bc2940eac6a9f32afcecfa7963d291269e229b1c4b76785b7ba0ba3aacc253835
SSDEEP 98304:0E9X4tUsN/YpjN1/Eng68TPkjlmTV31YJO0b7KiyLHhlGCdM0OcZfE:NdWNApjNBEykUh30/ELHXGCu/2E
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d

.exe 4.1MB

JaffaCakes118_bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d

IMPHASH 2f962f9e0aa6040738cb96510e5f3130
SHA256 bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d
MD5 07f69380c87b91bc4b69ff105d470664
SHA1 3ee01d41625262841cf48e08f9a2ef555129a4ee
SHA512 dbbb9f4af07f6d94a2769267299b678d6995c9a73ccc629e8258ae8e5d91ba4bc2940eac6a9f32afcecfa7963d291269e229b1c4b76785b7ba0ba3aacc253835
SSDEEP 98304:0E9X4tUsN/YpjN1/Eng68TPkjlmTV31YJO0b7KiyLHhlGCdM0OcZfE:NdWNApjNBEykUh30/ELHXGCu/2E
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

95:9a:cb:8b:03:52:54:78:00:3a:07:8a:3a:24:17:79:7c:a0:9f:8d:3f:87:a3:2d:bd:97:a0:61:96:b7:2b:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 30, 2024

Minor OS version

0

Major OS version

5

Entry point

19497

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jima29\nirugob\watuwefepevof\zamuyugirem ci.pdb

kernel32

SetFilePointer lstrlenA InterlockedIncrement OpenJobObjectA WaitNamedPipeA SetComputerNameW AddConsoleAliasW GetModuleHandleW GetGeoInfoW TlsSetValue GlobalAlloc LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW GetSystemDirectoryA GetVolumePathNameA GetThreadContext GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CopyFileA FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW FindNextFileA CreateMutexA GetFileAttributesExW ReadConsoleInputW LCMapStringW GetConsoleAliasesW GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle GetModuleHandleA HeapSize GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetTextExtentExPointA

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_bb2962b4f565f691960be7f2d36010a5776a8d49f6cd6c002c1ac0ae7b5d458d

PE Signature issue

kernel32

gdi32

generic