jaffacakes118_not-a-virus[.]Downloader[.]Win32[.]Agent[.]ckxt[.]c1f7f0e84304a454541f346b67b9487b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.Downloader.Win32.Agent.ckxt.c1f7f0e84304a454541f346b67b9487b
Size 1.6MB
Sample261014-eamylafx7n
SHA256 366de21f4e6d87120134c43a03b3e659a94ff4cb81b5968b51e454948e897548
MD5 c1f7f0e84304a454541f346b67b9487b
SHA1 4f6e5eb5a2d084f5c0dd365896bf410d3fb45b2e
SHA512 232b2824ce9132cb8edd602b05dde248597fd77ff3732a90e5ea4dc831374f63aeb12fafce9016a045a16a30b84b6848e984bd290254eaba4f887adc483823e0
SSDEEP 49152:wbfcx2eIzRet6PPwyo2MIvJtoiQKusITOirx:wgx/My6vJ+guV
TLSH
T19A75CF52729080BAC4B611B0A26D4769EEF0FAA14271CD0BB7C4394D5F709D2B63E7B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.Downloader.Win32.Agent.ckxt.c1f7f0e84304a454541f346b67b9487b

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.Agent.ckxt.c1f7f0e84304a454541f346b67b9487b

.exe 1.6MB

jaffacakes118_not-a-virus.Downloader.Win32.Agent.ckxt.c1f7f0e84304a454541f346b67b9487b

IMPHASH 934a1674d14e4ec71e4e8e044daafca6
SHA256 366de21f4e6d87120134c43a03b3e659a94ff4cb81b5968b51e454948e897548
MD5 c1f7f0e84304a454541f346b67b9487b
SHA1 4f6e5eb5a2d084f5c0dd365896bf410d3fb45b2e
SHA512 232b2824ce9132cb8edd602b05dde248597fd77ff3732a90e5ea4dc831374f63aeb12fafce9016a045a16a30b84b6848e984bd290254eaba4f887adc483823e0
SSDEEP 49152:wbfcx2eIzRet6PPwyo2MIvJtoiQKusITOirx:wgx/My6vJ+guV
TLSH
T19A75CF52729080BAC4B611B0A26D4769EEF0FAA14271CD0BB7C4394D5F709D2B63E7B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

46:e6:19:8a:06:33:79:34:a1:d8:ca:0d:3a:f7:50:10:e2:e7:66:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=W3i\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=W3i\, LLC,L=Sartell,ST=Minnesota,C=US

Chains

Oct 7, 2026

CN=W3i\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=W3i\, LLC,L=Sartell,ST=Minnesota,C=US

Minor OS version

Major OS version

Entry point

269140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tfs.vs2010.win7\admin\windows\MAIN\Installer.Desktop.Application\ReleaseNoMFC\FreezeWrapWin.pdb

comctl32

InitCommonControlsEx

kernel32

GetDiskFreeSpaceW LockFileEx GetTempPathW CreateFileW AreFileApisANSI FormatMessageW LoadLibraryW CreateFileMappingA LockFile UnlockFile InterlockedCompareExchange UnmapViewOfFile MapViewOfFile GetFullPathNameW GetFileAttributesExW GetDiskFreeSpaceA UnlockFileEx DeleteFileW MultiByteToWideChar GetPrivateProfileStringA GetPrivateProfileIntA CopyFileA SystemTimeToFileTime GetLocalTime GetTickCount WritePrivateProfileStringA WaitForSingleObject CreateMutexA ReleaseMutex SetUnhandledExceptionFilter GetCurrentThreadId Sleep GetLastError FindResourceExA FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte GetFileAttributesW SetEnvironmentVariableA CompareStringW CompareStringA SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetLocaleInfoA GetLocaleInfoW GetConsoleMode GetConsoleCP RtlUnwind GetStringTypeW GetStringTypeA QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP GetCPInfo RaiseException FormatMessageA GetModuleHandleA LocalAlloc lstrlenA LocalFree BeginUpdateResourceA HeapAlloc GetProcessHeap UpdateResourceA HeapFree EndUpdateResourceA LoadLibraryA EnumResourceNamesA EnumResourceLanguagesA FreeLibrary LoadLibraryExA GetUserDefaultUILanguage GetTempPathA FindFirstFileA FindNextFileA FindClose CreateDirectoryA GetSystemTime GetTempFileNameA DeleteFileA RemoveDirectoryA SetFileAttributesA GetFileAttributesA MoveFileA GetModuleFileNameA GetCurrentDirectoryA GetFullPathNameA GetLongPathNameA GetPrivateProfileSectionNamesA CloseHandle CreateProcessA OpenProcess CreateToolhelp32Snapshot Process32First Process32Next TerminateProcess GetExitCodeProcess Module32First Module32Next GetProcAddress GetCurrentProcessId VirtualQuery GetCurrentThread GetCurrentProcess CreateEventA WaitForSingleObjectEx ResetEvent SetEvent FileTimeToSystemTime GetTimeZoneInformation CreateFileA GetFileTime FileTimeToLocalFileTime GetFileSize ReadFile WriteFile SetFilePointer GetVersionExA GetSystemInfo GetWindowsDirectoryA GetSystemDirectoryA ExpandEnvironmentStringsA GlobalMemoryStatus WaitForMultipleObjects EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection HeapDestroy HeapReAlloc HeapSize GetModuleHandleW ExitProcess UnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetTimeFormatA GetDateFormatA ExitThread CreateThread GetSystemTimeAsFileTime HeapCreate VirtualFree VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetStdHandle InterlockedExchange InitializeCriticalSectionAndSpinCount

user32

EnumWindows IsWindowEnabled GetWindowThreadProcessId FindWindowExA GetClassNameA EnumChildWindows GetSystemMetrics SystemParametersInfoA GetShellWindow FindWindowA GetDesktopWindow LoadCursorA CreateWindowExA GetClassInfoExA RegisterClassExA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA CallWindowProcA DefWindowProcA LoadStringA ReleaseCapture GetKeyboardState CreatePopupMenu DestroyMenu AppendMenuA PostMessageA WaitForInputIdle SetDlgItemTextA AdjustWindowRectEx OffsetRect SetClassLongA GetDC DrawIcon ReleaseDC GetMessagePos SendMessageA DialogBoxParamA ScreenToClient ClientToScreen SetWindowPos SetTimer CreateDialogParamA EndDialog GetDlgItem SendMessageW GetDlgCtrlID ShowWindow EnableWindow SetForegroundWindow UpdateWindow GetSysColor GetSysColorBrush GetCursorPos PostQuitMessage LoadIconA IsIconic GetFocus SetFocus IsWindowVisible InvalidateRgn InvalidateRect MessageBoxExA MessageBoxA IsWindow SetWindowTextA GetWindowTextA GetWindowTextLengthA SetWindowLongA DestroyWindow LoadAcceleratorsA TrackPopupMenu SetCursor MoveWindow GetClientRect GetWindowRect KillTimer GetWindowLongA

shell32

Shell_NotifyIconA ShellExecuteExA SHGetSpecialFolderPathA

ole32

OleUninitialize CoInitializeSecurity CoCreateGuid StringFromGUID2 OleInitialize CoCreateInstance CoTaskMemFree CoInitialize CoUninitialize CoTaskMemAlloc

oleaut32

SafeArrayDestroy SafeArrayUnaccessData VariantClear VariantInit SysStringLen SysFreeString SysAllocStringLen VariantChangeType SysAllocString SafeArrayAccessData SafeArrayCreateVector

psapi

GetModuleFileNameExA EnumProcesses

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

userenv

ExpandEnvironmentStringsForUserA

wininet

InternetCloseHandle InternetReadFileExA InternetErrorDlg HttpQueryInfoA HttpSendRequestA HttpAddRequestHeadersA HttpOpenRequestA InternetConnectA InternetSetOptionA InternetCrackUrlA InternetCanonicalizeUrlA InternetCombineUrlA InternetGetCookieA InternetSetCookieA InternetSetStatusCallback InternetOpenA

shlwapi

UrlEscapeA SHDeleteEmptyKeyA PathRenameExtensionA PathCombineA PathStripPathA PathRemoveFileSpecA PathIsDirectoryEmptyA PathFindExtensionA

urlmon

IsValidURL

advapi32

RevertToSelf RegEnumValueA OpenProcessToken GetTokenInformation IsValidSid GetSidIdentifierAuthority GetSidSubAuthorityCount GetSidSubAuthority SetTokenInformation LookupPrivilegeValueA DuplicateTokenEx ImpersonateLoggedOnUser GetLengthSid AdjustTokenPrivileges RegOpenCurrentUser RegOpenUserClassesRoot RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegDeleteValueA RegQueryInfoKeyA RegEnumKeyExA

gdi32

SetBkColor

comdlg32

GetOpenFileNameA

Name

.text

Size

362KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-fr

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-ti

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-co

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text-de

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

253KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-de

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-ti

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-fr

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data-co

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

365KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.Agent.ckxt.c1f7f0e84304a454541f346b67b9487b

PE Signature issue

comctl32

kernel32

user32

shell32

ole32

oleaut32

psapi

version

userenv

wininet

shlwapi

urlmon

advapi32

gdi32

comdlg32

generic