JaffaCakes118_cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f

General

Target
JaffaCakes118_cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f
Size 402.7MB
Sample241230-vtflmatjdx
SHA256 cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f
MD5 19a99416b5f2e4c28d41ad2f13a368f4
SHA1 e55a948ad6d4051553642af6db0205a801168a33
SHA512 1c2101f74c30828949432e657b5d6a204c85edb8e3856b857703ca75c429ca64a557717634b0468f49ce32eedf0144d979770faf8ddeadf532b04181c086c1de
SSDEEP 24576:EaCZ2GmWV3uRR7xdMhdQ4X9vbEtA4cB7cyZLTokngqiFMazkuojfm+dNz9eEwiI:uZ2GmWFuRRlyhPXIRcpcaxgnzZojf6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

JaffaCakes118_cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f

.exe 402.7MB

JaffaCakes118_cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f

IMPHASH ca0ea07453d8ed808971fc633e8a0a19
SHA256 cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f
MD5 19a99416b5f2e4c28d41ad2f13a368f4
SHA1 e55a948ad6d4051553642af6db0205a801168a33
SHA512 1c2101f74c30828949432e657b5d6a204c85edb8e3856b857703ca75c429ca64a557717634b0468f49ce32eedf0144d979770faf8ddeadf532b04181c086c1de
SSDEEP 24576:EaCZ2GmWV3uRR7xdMhdQ4X9vbEtA4cB7cyZLTokngqiFMazkuojfm+dNz9eEwiI:uZ2GmWFuRRlyhPXIRcpcaxgnzZojf6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

08:b7:cb:68:6d:e1:b4:24:3e:b9:49:61:28:a5:d1:c2:a6:b6:c0:d0:8b:fe:7b:2f:0f:58:58:f4:b2:96:98:56

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=www.unlawful.com

Chains

Dec 30, 2024

Minor OS version

0

Major OS version

5

Entry point

1706627

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Lac nafepi dexolode\Kabo\nibiji\kakiwas derokid wemovex.pdb

kernel32

Sleep GetLastError FreeLibrary GetAtomNameW FindClose GetPrivateProfileStructW GetConsoleHistoryInfo GetTapeParameters GetShortPathNameW SetTapePosition BuildCommDCBW GetProcessHeap SetCalendarInfoW ReadConsoleA GetFileSizeEx LoadLibraryA GetCurrencyFormatW SetLastError GetModuleFileNameW SetEndOfFile LoadLibraryW GetProcAddress GetLongPathNameA LocalAlloc MoveFileA GetModuleHandleW ExitProcess GetCommandLineA GetStartupInfoA GetModuleHandleA WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType DeleteCriticalSection FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetModuleFileNameA InitializeCriticalSectionAndSpinCount RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapSize GetLocaleInfoA CloseHandle CreateFileA HeapAlloc VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW RaiseException

user32

GetCursorInfo GetSysColor GetMenuInfo

gdi32

GetBitmapBits StartDocA EnumFontFamiliesW

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_cc1fc9b4d7144e3842c3259f4b65c1c3113e6be2452c43cf2b55c7e7d84a5c1f

PE Signature issue

kernel32

user32

gdi32

generic