062b85859d5aae0adbf5a0cafea05b62_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

062b85859d5aae0adbf5a0cafea05b62_JaffaCakes118
Size

516KB
MD5

062b85859d5aae0adbf5a0cafea05b62
SHA1

6ebfb488006ce9a8190b52d86d6700c498bd541e
SHA256

79a620780df864a2bbfc7739c079576cd7b55f4d8311ef8027829c495068c206
SHA512

c9450374481e720c62e68429a14e6ca1fd96e9036aca730553b1fbf28a291b23fe8f4717e5185dafac868836f67f6c0be58a3bdf9224b86bba9ced5b1ba5ca8f
SSDEEP

6144:OprzsgVreGtylQlA2pLVJ4lGYxGUPUqKcMM70q2DMEKhiurHHhOAwL/4hJrOtTa7:OprDW2pJylZ85EtIknQYJSNa1NWN0XQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062b85859d5aae0adbf5a0cafea05b62_JaffaCakes118

Files

062b85859d5aae0adbf5a0cafea05b62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2026da0199a127ce0f16bdb1e82b33af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\va

Imports

kernel32

TlsFree
SetStdHandle
GetEnvironmentStringsW
UnlockFileEx
VirtualFree
GetVersion
GetCurrentProcess
GetLocalTime
GetCurrentThread
WriteFile
CreateMutexA
FindFirstFileA
LCMapStringA
GetStringTypeW
QueryPerformanceCounter
CompareStringA
LeaveCriticalSection
InitializeCriticalSection
SetHandleCount
TlsAlloc
RtlUnwind
IsBadWritePtr
ExitProcess
SetEnvironmentVariableA
ReadFile
SetFilePointer
GetStdHandle
GetSystemTimeAsFileTime
HeapFree
VirtualQuery
GetCPInfo
TlsGetValue
GetEnvironmentStrings
GetCommandLineW
EnterCriticalSection
GetSystemTime
GetStringTypeA
FreeEnvironmentStringsA
GetStartupInfoA
InterlockedIncrement
GetCommandLineA
CloseHandle
GetModuleFileNameW
HeapReAlloc
VirtualAlloc
GetModuleFileNameA
TlsSetValue
GetCurrentProcessId
CompareStringW
HeapDestroy
UnhandledExceptionFilter
GetTimeZoneInformation
ReadConsoleA
GetProcAddress
FlushFileBuffers
FreeEnvironmentStringsW
OpenMutexA
LoadLibraryA
InterlockedExchange
GetCurrentThreadId
GetModuleHandleA
GetTickCount
HeapCreate
GetFileType
GetLastError
WideCharToMultiByte
DeleteCriticalSection
InterlockedDecrement
TerminateProcess
HeapAlloc
LCMapStringW
MoveFileExA
MultiByteToWideChar
GetStartupInfoW
SetLastError

comctl32

CreateStatusWindow
ImageList_Write
ImageList_DrawEx
CreateUpDownControl
DrawStatusText
ImageList_Read
ImageList_DragEnter
_TrackMouseEvent
ImageList_Destroy
GetEffectiveClientRect
CreateStatusWindowW
ImageList_SetOverlayImage
InitCommonControlsEx

shell32

ExtractAssociatedIconExW
SHGetSpecialFolderPathW
ShellAboutW

advapi32

LookupAccountNameW
GetUserNameA
CryptGenKey
GetUserNameW

user32

GetScrollPos
SetPropW
MessageBoxIndirectA
CharNextA
BroadcastSystemMessageW
SetRectEmpty
ReplyMessage
IsCharAlphaNumericA
SendInput
CallWindowProcA
DdeCreateStringHandleA
VkKeyScanExW
GetMenuContextHelpId
RemovePropW
GetMessagePos
InsertMenuA
GetPropA
GetActiveWindow
SetWindowTextA
ScreenToClient
IsCharAlphaA
SetLastErrorEx
RegisterClassA
LoadCursorFromFileW
EnumDisplaySettingsExA
CreateMenu
ActivateKeyboardLayout
DdeFreeDataHandle
SetCapture
ReuseDDElParam
PtInRect
CopyIcon
InsertMenuItemW
OemToCharA
EnumDisplaySettingsExW
LookupIconIdFromDirectory
GetKeyboardState
GetDlgItem
DlgDirListA
CopyRect
WindowFromDC
LoadMenuW
RegisterClassExA
SetMessageQueue
DdeCreateStringHandleW
RegisterWindowMessageW
PackDDElParam
CloseDesktop
SetWindowsHookA
DdeImpersonateClient
DdeKeepStringHandle
SetCaretPos
SetClassLongW
GetClipboardViewer
MapVirtualKeyW
GetOpenClipboardWindow
GetProcessWindowStation
OemKeyScan
GetWindowThreadProcessId
GetMenuCheckMarkDimensions
CallWindowProcW
GetKeyState
CharToOemBuffW
CharUpperBuffA

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2026da0199a127ce0f16bdb1e82b33af

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

shell32

advapi32

user32

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 248KB - Virtual size: 247KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 248KB - Virtual size: 247KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 20KB - Virtual size: 18KB