JaffaCakes118_f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a

General

Target
JaffaCakes118_f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a
Size 4.0MB
Sample241230-ea1jpaxkgl
SHA256 f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a
MD5 36461bbee0e47611df2f657bacabe765
SHA1 28e6b17fa46bcf201210db3cf2fae650ab464362
SHA512 45fdcfdbef11428bfaf82c8b11af2567773eb9250777a35b671bff255e7314e9f89fb54d7588c37b47c190c03a71e817808d262f9d6c75fad31483d7a2e64fb9
SSDEEP 98304:dT/SWYAKt9XCVRV+CAAoqA4XFSbXV03AbPkF22L0Q:4fAo9XCVtAAofkFUa3AbPkYiZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a

.exe 4.0MB

JaffaCakes118_f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a

IMPHASH 1076d4eb9f464e21562d6629e831473b
SHA256 f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a
MD5 36461bbee0e47611df2f657bacabe765
SHA1 28e6b17fa46bcf201210db3cf2fae650ab464362
SHA512 45fdcfdbef11428bfaf82c8b11af2567773eb9250777a35b671bff255e7314e9f89fb54d7588c37b47c190c03a71e817808d262f9d6c75fad31483d7a2e64fb9
SSDEEP 98304:dT/SWYAKt9XCVRV+CAAoqA4XFSbXV03AbPkF22L0Q:4fAo9XCVtAAofkFUa3AbPkYiZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

82:f4:b1:3e:14:cf:18:29:c1:6e:bd:4b:55:b7:90:23:86:13:f6:3a:2b:d7:13:65:bd:35:ca:06:f0:f3:53:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Dec 12, 2024

Minor OS version

0

Major OS version

5

Entry point

14439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gejimulod41\cosogu.pdb

kernel32

SetFilePointer OpenFileMappingA GetProfileIntA ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedExchange SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA GetProductInfo LocalSize FileTimeToDosDateTime FindFirstChangeNotificationW GlobalGetAtomNameA FindResourceExA GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomW TerminateJobObject lstrcpynA WriteConsoleA GetBinaryTypeA GetLastError GetCommandLineW InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA OpenWaitableTimerA GetModuleHandleA LoadLibraryW EnterCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetProcessTimes GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedDecrement FindActCtxSectionStringW GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo GetConsoleMode Sleep ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

CharUpperW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_f7f319d5bc0feca52698458044be515e78c28ae7350b0d4644681728f4c65b2a

PE Signature issue

kernel32

user32

generic