497f7d69be6c9ba572ad8096d762eed9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

497f7d69be6c9ba572ad8096d762eed9_JaffaCakes118
Size

356KB
MD5

497f7d69be6c9ba572ad8096d762eed9
SHA1

38c86a5632b5e9ea39dbc21096b3401dc8944e75
SHA256

2f4dbe106abeb7bd9cb954ab1997d25cef95da32d614e6bb2cb962543d07b89f
SHA512

3434b179cd56847dc3f588ec7aec22622416848bdeb5c38f569cf0b616417aaeb7e3ac13698f1e64764816ac86383df26dac1fc5990590077bbf38dcde383083
SSDEEP

6144:Sae/c0RVIqxFu4s2a9XHCd9hxJamsAT4k+wCGbfQfojzMBR5i:W/cMVDxFu43cHYf1TPCAxjzMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
497f7d69be6c9ba572ad8096d762eed9_JaffaCakes118

Files

497f7d69be6c9ba572ad8096d762eed9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af1f0d2de1aa75deb87be3cccb118fb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventW
OpenMutexA
CloseHandle
MapViewOfFileEx
DosDateTimeToFileTime
CreateFileMappingA
SetLocaleInfoA
OpenEventA
GetFileSize
GetFileType
GetModuleHandleA
GetModuleHandleW
CopyFileA
CompareStringW
WaitForSingleObject
FindClose
GetCurrentThreadId
FreeConsole
GetCommandLineA
GetCurrentProcessId
GetFileAttributesW
LoadLibraryA
SetThreadLocale
DuplicateHandle
OpenMutexW
CreateFileA
OpenSemaphoreA
SetStdHandle
SetFilePointer
FlushFileBuffers
GetProcAddress
GetOEMCP
GetCPInfo
GetACP
GetFileAttributesA
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc

user32

GetClipboardData
GetWindowTextA
GetWindowTextLengthW
GetMenu
FindWindowExW
GetWindowTextW
CreatePopupMenu
CreateMenu
FindWindowA
GetWindowTextLengthA
GetClientRect
CreateWindowExW
CreateWindowExA

gdi32

CreateSolidBrush

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af1f0d2de1aa75deb87be3cccb118fb6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 304KB - Virtual size: 300KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 304KB - Virtual size: 300KB