Static task
static1
Behavioral task
behavioral1
Sample
47999d24a62260aceac07d042e065e8000173124ca9b8d13ac2516338b5cd282.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_5c43677f344e5f1bfaf29aeba0e69a020eef92b8555d6637f74de0e404a640f2
-
Size
1.4MB
-
MD5
39b587a9dae60cbc862f35c71d6a6fda
-
SHA1
55f975f00acfb9fd6b484a1ab7ff30879fc9ca21
-
SHA256
5c43677f344e5f1bfaf29aeba0e69a020eef92b8555d6637f74de0e404a640f2
-
SHA512
c503f4bffae95f5acc1a2beeaa19d57f47af20d18f37ec8d05361bc4e30cf690d4400c7d13d4126b36c96614cfe3c0f8b7bc642fc4b093bbeb6a355ff98de88c
-
SSDEEP
24576:dZrveRC5R5kq0imLHbIP00m1E9s2IMhIo+8osq5Og+wZd4P2wo:dcR45Jpmjbkt9MonmcglW2t
Malware Config
Signatures
Files
-
JaffaCakes118_5c43677f344e5f1bfaf29aeba0e69a020eef92b8555d6637f74de0e404a640f2.zip
Password: infected
-
47999d24a62260aceac07d042e065e8000173124ca9b8d13ac2516338b5cd282.exe windows:5 windows x86 arch:x86
af58d77e2de72a34dfec8ea762118eda
Code Sign
04:70:ca:70:5c:f6:9c:c3:7f:88:20:17:ef:7d:ac:4e:7e:81Certificate
IssuerCN=R3,O=Let's Encrypt,C=USNot Before28-08-2022 04:23Not After26-11-2022 04:23SubjectCN=wire.com7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23-12-2017 00:00Not After22-03-2029 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
86:36:5f:49:30:6d:f7:fd:bd:f8:da:fe:f2:0a:61:1d:e9:44:99:46:a1:da:93:d6:ac:1b:e9:74:9f:02:9c:b1Signer
Actual PE Digest86:36:5f:49:30:6d:f7:fd:bd:f8:da:fe:f2:0a:61:1d:e9:44:99:46:a1:da:93:d6:ac:1b:e9:74:9f:02:9c:b1Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\top bibatix kogeli\Mibik\Ton\fefefapa\Behe quoce.pdb
Imports
kernel32
GlobalCompact
GetProfileIntW
FreeLibrary
InterlockedIncrement
InterlockedCompareExchange
ReadConsoleW
SetHandleCount
FormatMessageW
SetConsoleCP
SetConsoleTitleA
VerifyVersionInfoW
GetHandleInformation
GetLastError
GetProcAddress
GetConsoleAliasesLengthW
LoadLibraryA
BuildCommDCBAndTimeoutsW
VirtualLock
GetCurrentConsoleFont
HeapWalk
FoldStringA
GetDefaultCommConfigA
AcquireSRWLockShared
PurgeComm
GetConsoleScreenBufferInfoEx
ReleaseMutex
CreateFileA
PulseEvent
FindFirstChangeNotificationW
CreateConsoleScreenBuffer
GetFullPathNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
user32
LoadBitmapW
LoadMenuA
gdi32
GetFontLanguageInfo
advapi32
OpenBackupEventLogA
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ