24104fe6f68136a5c908c7dfcc877642_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24104fe6f68136a5c908c7dfcc877642_JaffaCakes118
Size

1.6MB
MD5

24104fe6f68136a5c908c7dfcc877642
SHA1

3e84ff703fee227509fdcb29e0d07e75f4524376
SHA256

705e5a569ca6b665d0d9db1adc75a3f457c9cf71ed12204c305a3cfb70b405ac
SHA512

efcb5803b281386e04c3c6fc2b4fe67c23360929b9e7db9dd74e3e913b1998bf437e756a0a61b470144686e5d5ff4352cc3787f444760434544b8752cf526beb
SSDEEP

49152:siUl23KOPR5Yqp2vym1c66cgDU3arwuHPf:s6R5YDnP6DU4lv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24104fe6f68136a5c908c7dfcc877642_JaffaCakes118

Files

24104fe6f68136a5c908c7dfcc877642_JaffaCakes118
.exe windows:4 windows x86 arch:x86

295936347f947e28948f86a58cf01e0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_GetImageRect
ImageList_LoadImage
ImageList_SetOverlayImage
InitMUILanguage
DestroyPropertySheetPage
ImageList_SetIconSize
CreateUpDownControl

user32

RegisterClassExA
RegisterClassA
GetPropW
CloseDesktop
OemToCharW
GetAncestor
MessageBoxExA
AdjustWindowRectEx
MessageBoxExW
IsIconic
wsprintfW
DdeSetUserHandle
GetFocus
DefDlgProcA
SetMenuItemInfoW
RegisterClipboardFormatW

kernel32

QueryPerformanceCounter
GetEnvironmentStringsW
IsDebuggerPresent
SystemTimeToFileTime
GetDateFormatA
GetModuleFileNameW
GetCurrentThreadId
WriteFile
HeapReAlloc
TlsSetValue
GetStringTypeA
OpenMutexA
GetLastError
InitializeCriticalSection
CreateMutexA
SetThreadLocale
GetFileType
GetSystemTime
GetStringTypeW
TlsAlloc
GetStdHandle
OutputDebugStringA
HeapFree
TlsGetValue
InterlockedExchange
SetLastError
GetDiskFreeSpaceExW
CompareFileTime
GetModuleFileNameA
GetEnvironmentStrings
GetLocalTime
GetStartupInfoA
FlushFileBuffers
FreeEnvironmentStringsW
LCMapStringW
InterlockedDecrement
FindResourceExW
FindNextFileW
GetTimeZoneInformation
SetFilePointer
InterlockedExchangeAdd
GetModuleHandleA
GetSystemTimeAsFileTime
GetCommandLineA
AddAtomA
TerminateProcess
ReadFile
HeapDestroy
GetCPInfo
LoadLibraryA
VirtualFree
EnumDateFormatsW
GetFileAttributesExW
GetFileAttributesExA
SetEnvironmentVariableA
CompareStringA
VirtualQuery
RtlUnwind
UnhandledExceptionFilter
MultiByteToWideChar
TlsFree
SetConsoleCursorInfo
GetVersion
GetCurrentThread
ReadConsoleOutputAttribute
GetTickCount
GetCurrentProcess
CompareStringW
ExitProcess
InterlockedIncrement
GetStartupInfoW
CloseHandle
DeleteCriticalSection
GetCurrentProcessId
LCMapStringA
SetStdHandle
CreateMutexW
HeapCreate
GetCommandLineW
GetProcAddress
WideCharToMultiByte
FreeEnvironmentStringsA
LocalFree
IsBadWritePtr
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
EnumCalendarInfoExW
VirtualAlloc
HeapAlloc

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

295936347f947e28948f86a58cf01e0e

Headers

File Characteristics

Imports

comctl32

user32

kernel32

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 246KB - Virtual size: 258KB

.data Size: 1.3MB - Virtual size: 1.2MB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 246KB - Virtual size: 258KB

.data
Size: 1.3MB - Virtual size: 1.2MB

.rsrc
Size: 18KB - Virtual size: 18KB