JaffaCakes118_2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f
Size 4.3MB
Sample241230-axd7rasjar
SHA256 2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f
MD5 450b0a4a6c936a307b6774ff48724088
SHA1 b544d971f81019946d09d75e32c98e20ca5862dc
SHA512 4394e82fd76afbc379a04b2b657f5be7a9f6e355f0b19fb8fb56075a5c3851091767590e3956508ac852d6ac400902c0580fae9e45eb310764eb9d1f8093f044
SSDEEP 98304:+cb/0UAxCmLhOJlG2GBPT8JJl4ipxM24Ie:+c7jAxCmLoLGFADe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f

.exe 4.3MB

JaffaCakes118_2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f

IMPHASH fc447b22a7c46cfc167f33c086bb3b54
SHA256 2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f
MD5 450b0a4a6c936a307b6774ff48724088
SHA1 b544d971f81019946d09d75e32c98e20ca5862dc
SHA512 4394e82fd76afbc379a04b2b657f5be7a9f6e355f0b19fb8fb56075a5c3851091767590e3956508ac852d6ac400902c0580fae9e45eb310764eb9d1f8093f044
SSDEEP 98304:+cb/0UAxCmLhOJlG2GBPT8JJl4ipxM24Ie:+c7jAxCmLoLGFADe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

26:4e:13:12:25:de:0e:55:d7:af:03:23:79:8b:cb:d1:54:d0:72:a4:d1:c1:16:fa:0c:4e:ba:ba:37:91:95:9a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10301

Chains

Dec 12, 2024

Minor OS version

Major OS version

Entry point

4289872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tijerubuvicu91\gohamowovor fehasoguzew80_mikodahes.pdb

kernel32

SetCriticalSectionSpinCount SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA SetErrorMode FindResourceW BuildCommDCBAndTimeoutsA FreeLibrary SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW ReadConsoleA InterlockedDecrement WaitNamedPipeA SetMailslotInfo WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW CreateJobObjectW GlobalLock AddConsoleAliasW SetVolumeMountPointW GetComputerNameW OpenSemaphoreA CreateHardLinkA GetFileAttributesExA _lclose GetModuleHandleW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA GetSystemWow64DirectoryA SetCommTimeouts CreateActCtxW WaitForMultipleObjectsEx InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GetConsoleMode FatalAppExitW GetThreadSelectorEntry GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment ReadConsoleOutputW SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList GetFileAttributesA lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition VerifyVersionInfoA HeapQueryInformation TerminateProcess GetAtomNameW FileTimeToSystemTime IsDBCSLeadByte GetModuleFileNameW lstrcatA GetBinaryTypeW GetNumaNodeProcessorMask ExitThread GetVolumePathNameA lstrlenW WritePrivateProfileStringW GlobalUnlock VirtualUnlock GetTempPathW GetStringTypeExA GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetPrivateProfileIntW VerifyVersionInfoW InterlockedExchange ReleaseActCtx SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer BackupRead BindIoCompletionCallback GetProcAddress GetLongPathNameA VirtualAlloc HeapSize CreateNamedPipeA CreateJobSet LocalLock LockFileEx EnterCriticalSection VerLanguageNameW BuildCommDCBW FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId LocalAlloc MoveFileA GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW HeapWalk GetPrivateProfileStructA GetTapeParameters SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA WaitCommEvent FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent FatalExit FreeEnvironmentStringsW EnumResourceNamesA FindNextFileW WriteProfileStringW EnumDateFormatsW FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle FindFirstVolumeA GetVersionExA TlsAlloc TerminateJobObject CloseHandle GetVersion DeleteTimerQueueTimer GlobalAddAtomW GetPrivateProfileSectionW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CopyFileExA CreateFileW SetStdHandle GetPrivateProfileSectionNamesW UnregisterWait GetThreadContext CompareStringW GetFullPathNameA RaiseException GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage LeaveCriticalSection LoadLibraryW GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

advapi32

InitiateSystemShutdownA GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_2d5a63de6f78ddc5b2ff6136f9eefdc37ec62e3971391b9030203e52be8c7b7f

PE Signature issue

kernel32

user32

gdi32

advapi32

msimg32

generic