ede13359277af0557c000863e764df52_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ede13359277af0557c000863e764df52_JaffaCakes118
Size

503KB
MD5

ede13359277af0557c000863e764df52
SHA1

2373aa1f573f8645644032c30ab9bb3651678d1c
SHA256

167e3baca9107d6080ff89d00f3b29e85174571fd1eb96790958aec65fedadcd
SHA512

2bf8a612d6dbeee9b3a38f9bedbde1b389c214063419c360fb166adf61cf0eb901ca6f8b628b00cdca73f555f0fbda1217f766d557e59d96f662383ace68e202
SSDEEP

6144:3DKeFzf+kwx00SsQLDDujSzp5GzIufA/vKA362iMKgzGJWHX3aDvyx13iMmPO/S3:Pzf+kw4DujSzpIInbqKXiJPryHMou2kf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede13359277af0557c000863e764df52_JaffaCakes118

Files

ede13359277af0557c000863e764df52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2c4bc73f9d63a6ebb9f0a3766c22081f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\build\nightly\sandbox_avg9_vc8_avg90_sp3\source\avg8\Release_Unicode_vs80\Win32\avgrsx.pdb

Imports

kernel32

SetUnhandledExceptionFilter
GetDiskFreeSpaceExW
DeviceIoControl
GetDriveTypeW
QueryDosDeviceW
GetLastError
CloseHandle
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreateProcessW
GetOverlappedResult
CancelIo
ReleaseMutex
CreateMutexW
SetNamedPipeHandleState
WaitNamedPipeW
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
GetModuleFileNameW
GetCurrentProcessId
GetComputerNameW
GetWindowsDirectoryW
ProcessIdToSessionId
GetVersionExW
GetCurrentThreadId
GetSystemDirectoryW
GetCurrentDirectoryW
GetTempPathW
FindNextFileW
FindFirstFileW
GetFileAttributesW
FindClose
GetSystemDefaultLCID
GetACP
CompareStringW
WideCharToMultiByte
LoadLibraryA
CreateFileW
Sleep
GetSystemTimeAsFileTime
GetTickCount
GetLocalTime
SystemTimeToFileTime
WaitForMultipleObjects
SetLastError
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
LoadLibraryW
GetProcAddress
ResetEvent
CreateEventW
SetEvent
GetModuleHandleW
LoadLibraryExW
GetCurrentProcess
GetSystemInfo
WriteFile
GetFileSize
SetFilePointer
ReadFile
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FlushFileBuffers
CreateFileMappingW
ResumeThread
TerminateThread
SetThreadPriority
GetExitCodeThread
LocalAlloc
LocalFree

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_except_handler4_common
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
swprintf_s
_set_invalid_parameter_handler
_invoke_watson
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
??2@YAPAXI@Z
srand
rand
wcsncmp
_wgetenv_s
printf
malloc
free
_vsnwprintf_s
_wcsupr_s
wcslen
towlower
strlen
_beginthreadex
_errno
memcmp
??_V@YAXPAX@Z
__iob_func
realloc
vfprintf
abort
memchr
strcmp
qsort
_time64
_lrotl
fprintf
__CxxFrameHandler3
??3@YAXPAX@Z
_purecall
memset
memmove
memcpy
_CxxThrowException
_except_handler3

advapi32

ImpersonateNamedPipeClient
RevertToSelf

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c4bc73f9d63a6ebb9f0a3766c22081f

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcr80

advapi32

Exports

Exports

Sections

.text Size: 365KB - Virtual size: 364KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 37KB - Virtual size: 54KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 365KB - Virtual size: 364KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 37KB - Virtual size: 54KB

.rsrc
Size: 4KB - Virtual size: 3KB