e860bf43d43bfeccdfdfbffeb49d4fb1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e860bf43d43bfeccdfdfbffeb49d4fb1_JaffaCakes118
Size

284KB
MD5

e860bf43d43bfeccdfdfbffeb49d4fb1
SHA1

4e06aff6714bbb5143fc35c1ffed5d9b62594fa2
SHA256

3aceb6b9c87850cd3150235d094d39eeb37d0d6abd885dff2ce21ed1fc70d824
SHA512

b947036c03e8d9b6eb87ab140fc23a8cf1b9d319d1dc857f4e169d3b09296b6a9c74a7625b4d305a4585cedb61d281e3e3fd792b4fa35951dcad6c60df2eb7a6
SSDEEP

6144:7uFSYgxbmRTmR7PO14L44HRt8Ry+tNUgYqXxqGtZiHpjKVlf:72wbmVGbO14L4/rNUgAGjiH9KVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e860bf43d43bfeccdfdfbffeb49d4fb1_JaffaCakes118

Files

e860bf43d43bfeccdfdfbffeb49d4fb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

369df07bec932e084fac5126da24ef3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\STET.PDB

Imports

user32

TranslateAcceleratorW
SetTimer
RegisterClassExA
RegisterClassA
DdeFreeDataHandle
CreateWindowExW
ShowWindow
MenuItemFromPoint
GetGuiResources
SendMessageTimeoutA
CharLowerBuffW
CallMsgFilterA
InternalGetWindowText
MessageBoxExA
MessageBoxW
ValidateRect
SwitchToThisWindow

shell32

FindExecutableW
ExtractAssociatedIconExW
DoEnvironmentSubstW
ExtractAssociatedIconA
SHGetPathFromIDList

kernel32

GetDateFormatA
GetOEMCP
WriteFile
GetUserDefaultLCID
CompareStringW
GetCommandLineA
GetACP
GetStringTypeA
HeapReAlloc
GetLocaleInfoA
GetStartupInfoA
CompareStringA
FlushFileBuffers
UnhandledExceptionFilter
LCMapStringW
VirtualFree
GetLocaleInfoW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetModuleFileNameA
GetLastError
GetCPInfo
HeapFree
LeaveCriticalSection
SetFilePointer
GetModuleHandleA
GetCurrentProcess
VirtualProtect
ReadFile
WideCharToMultiByte
HeapAlloc
DeleteCriticalSection
TlsSetValue
MultiByteToWideChar
GetStringTypeW
CloseHandle
SetEnvironmentVariableA
TlsAlloc
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
IsBadWritePtr
LoadLibraryA
QueryPerformanceCounter
SetLastError
InterlockedExchange
GetTickCount
SetHandleCount
GetStdHandle
GetVersionExA
GetEnvironmentStrings
RtlUnwind
IsValidCodePage
HeapCreate
GetTimeFormatA
GetFileType
OpenMutexA
TerminateProcess
VirtualQuery
VirtualAlloc
GetSystemTimeAsFileTime
TlsGetValue
GetTimeZoneInformation
ExitProcess
SetStdHandle
HeapSize
GetProcAddress
EnumSystemLocalesA
GetPrivateProfileSectionNamesA
InitializeCriticalSection
TlsFree
GetSystemInfo
EnterCriticalSection
CreateMutexA
HeapDestroy
LCMapStringA
IsValidLocale

comctl32

InitCommonControlsEx

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

369df07bec932e084fac5126da24ef3f

Headers

File Characteristics

PDB Paths

Imports

user32

shell32

kernel32

comctl32

Sections

.text Size: 165KB - Virtual size: 164KB

.rdata Size: 22KB - Virtual size: 29KB

.data Size: 87KB - Virtual size: 87KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 165KB - Virtual size: 164KB

.rdata
Size: 22KB - Virtual size: 29KB

.data
Size: 87KB - Virtual size: 87KB

.rsrc
Size: 8KB - Virtual size: 7KB