1bf7118a56f22093ac9951b061595f7f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1bf7118a56f22093ac9951b061595f7f_JaffaCakes118
Size

191KB
MD5

1bf7118a56f22093ac9951b061595f7f
SHA1

65c29da3ea9e66499b41834de9ba853e3ddc4957
SHA256

8bae50fce5d6e08a0d194f1e8e301cce39b5e5e21f204e384d144b22c9c553ed
SHA512

b9e225c0ab691eea94a68f46536385a546ab7eafee1c4d5102c206971423582c6f266a5945e9e2c622968e2453fc226673e24541c04a65be9ddca00ade81449f
SSDEEP

3072:XHWoqyq/QApMeIjWr0oBTdbMSeJ95il/hlEwE4sOTcNhMHZjGQ9J3HYJT84:XHWoq20KAXTMS2vggwEVOTGef34JT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf7118a56f22093ac9951b061595f7f_JaffaCakes118

Files

1bf7118a56f22093ac9951b061595f7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DEVE1OPMENT\VC+-\Cry4tor54volu\iongold\release\main.pdb

Imports

kernel32

GetTempFileNameA
GetFileAttributesA
FindFirstChangeNotificationA
DeleteFileA
CopyFileA
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
InterlockedCompareExchange
InterlockedIncrement
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
HeapWalk
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
CreateProcessW
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
MoveFileW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetSystemInfo
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
GetVersionExA
GetStartupInfoA

user32

CreatePopupMenu
GetDoubleClickTime
SetCursor
IntersectRect
InsertMenuItemA
ClientToScreen
InflateRect
IsClipboardFormatAvailable
SetForegroundWindow
DrawIcon
LoadImageA
OffsetRect
SendDlgItemMessageW
TrackPopupMenu
GetCursorPos
RegisterClassExA
GetClassInfoExA
GetSysColorBrush
GetActiveWindow
AppendMenuA
GetWindowLongA
CallWindowProcA
DrawFrameControl
FillRect
IsDialogMessageW
PostMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetWindowLongA
CheckRadioButton
EndDialog

ws2_32

WSASocketA
WSAGetOverlappedResult
WSACreateEvent
WSAConnect
socket
WSAStartup
WSACleanup
accept
bind
closesocket
connect
gethostbyaddr

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ws2_32

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 77KB

.rsrc Size: 1024B - Virtual size: 940B

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 77KB

.rsrc
Size: 1024B - Virtual size: 940B