177fcb3628e011d7509dccc5828e48ef_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

177fcb3628e011d7509dccc5828e48ef_JaffaCakes118
Size

562KB
MD5

177fcb3628e011d7509dccc5828e48ef
SHA1

e6d82b7098a433d639ee7f38cb7aef17226c32c2
SHA256

bdb59a3ee6588e796307af6fca41263fa844dff0d90f52b82204f8db71693c2d
SHA512

b4c84c27682711b3c9c769954e5206bebb2648d4cc86e399ba52fba6e5906122e8004dca8e52b1375dfa6bede833bee7bff4134b50cd1d3fe63d51d27658fd1e
SSDEEP

12288:jE5lWOfPXwVPIWHzAGi7NFo7h9ihV1F74ZyCsoIMUNNg4c:Q533XEPIWHzAFhWhwD30I/oIhf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177fcb3628e011d7509dccc5828e48ef_JaffaCakes118

Files

177fcb3628e011d7509dccc5828e48ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11d970b0f9c8ed12ea25d2389cafc988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\o

Imports

comctl32

InitCommonControlsEx
ImageList_DrawIndirect

shell32

SHAddToRecentDocs
RealShellExecuteW

user32

BeginDeferWindowPos
DestroyWindow
SetWindowTextA
GetDlgItemTextA
DefWindowProcA
ShowWindow
GetFocus
CreateWindowExA
CharToOemBuffA
UnregisterClassA
SetClipboardData
DdeSetUserHandle
PtInRect
WindowFromDC
LoadMenuIndirectW
OpenIcon
ActivateKeyboardLayout
DefDlgProcW
PostQuitMessage
GetClipboardSequenceNumber
RegisterClassA
MessageBoxA
WaitForInputIdle
DdeGetData
DialogBoxParamW
RegisterClassExA

wininet

FtpGetFileEx
InternetGetCertByURLA
InternetCanonicalizeUrlA
InternetConfirmZoneCrossingW
InternetCrackUrlA
HttpOpenRequestW
FtpSetCurrentDirectoryA
InternetCreateUrlW
FindFirstUrlCacheEntryW

kernel32

LoadLibraryA
GetNamedPipeHandleStateA
DebugBreak
ExitThread
GetStartupInfoW
SetConsoleCP
GetStdHandle
GlobalDeleteAtom
GetCommandLineA
IsDebuggerPresent
GetCurrentProcessId
OpenMutexA
SetEnvironmentVariableA
GetCurrentThreadId
ReadFile
TlsSetValue
GetSystemTime
TlsFree
LCMapStringA
SetStdHandle
GetModuleFileNameW
FlushFileBuffers
LocalAlloc
CreateMutexA
IsValidLocale
SetLastError
GetFileType
GetCommandLineW
GlobalUnfix
CreateEventW
WaitNamedPipeW
ExitProcess
GetModuleHandleA
CloseHandle
SetConsoleTitleA
SetHandleCount
WriteFile
GetTickCount
GetStringTypeA
InterlockedExchange
HeapDestroy
GetVersion
CompareStringW
SetFilePointer
QueryPerformanceCounter
RtlUnwind
GetModuleFileNameA
LeaveCriticalSection
TlsGetValue
GetStringTypeW
MultiByteToWideChar
GetCompressedFileSizeA
GetLastError
GetProcessShutdownParameters
GetSystemTimeAsFileTime
GetDriveTypeW
HeapFree
GetCurrentProcess
TerminateProcess
HeapCreate
DeleteCriticalSection
VirtualFree
GetTimeZoneInformation
InterlockedDecrement
VirtualQuery
SetComputerNameA
GetStartupInfoA
EnterCriticalSection
FreeEnvironmentStringsW
LCMapStringW
UnhandledExceptionFilter
IsBadWritePtr
GetCPInfo
TlsAlloc
lstrcatW
HeapAlloc
GetProcAddress
GetLocalTime
GetCurrentThread
InterlockedIncrement
FreeEnvironmentStringsA
CompareStringA
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
GetProfileStringA

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11d970b0f9c8ed12ea25d2389cafc988

Headers

File Characteristics

PDB Paths

Imports

comctl32

shell32

user32

wininet

kernel32

Sections

.text Size: 352KB - Virtual size: 352KB

.rdata Size: 8KB - Virtual size: 18KB

.data Size: 110KB - Virtual size: 110KB

.rsrc Size: 90KB - Virtual size: 89KB

.text
Size: 352KB - Virtual size: 352KB

.rdata
Size: 8KB - Virtual size: 18KB

.data
Size: 110KB - Virtual size: 110KB

.rsrc
Size: 90KB - Virtual size: 89KB