2416f26d8a5043a67c3c91868b148668_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2416f26d8a5043a67c3c91868b148668_JaffaCakes118
Size

479KB
MD5

2416f26d8a5043a67c3c91868b148668
SHA1

b5ba7ab28f6651c3783482ff75fe2a488b81ac2a
SHA256

68088040eb49b6ee1c34ea1bcfadae103368cf397ff6494365e55ba88f3fbc06
SHA512

5fe2b66b268363fb0d95d6fa5156948a17f3398241e56e3d19a3897f157b7dd9442d91c7ef6f2c1bc85fff1b5ba6c65c68f6615b0a67501633ae3c0b36662565
SSDEEP

12288:RM6DGuRwHMF8zhToQGqZ7FClUNcjMAROp0RhG3zGcYPvcGhtEDVV:RM6JbujG24CWMAROpaeXkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2416f26d8a5043a67c3c91868b148668_JaffaCakes118

Files

2416f26d8a5043a67c3c91868b148668_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20f770f6ac053b70ead8bb868607a88c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\hoano\qfmoc\ecj.PDB

Imports

kernel32

GetFileType
GetVersion
VirtualAlloc
GetTickCount
CreateMutexW
SetCurrentDirectoryW
TlsFree
GetFileTime
GetModuleHandleW
GetPrivateProfileStructA
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeW
EnterCriticalSection
ExitProcess
TlsAlloc
UnhandledExceptionFilter
GetVolumeInformationA
CreateMutexA
LCMapStringA
GetProcAddress
DeleteCriticalSection
GetOEMCP
HeapCreate
MultiByteToWideChar
HeapDestroy
GetStartupInfoA
GetSystemDefaultLangID
TerminateProcess
ReadFile
GetEnvironmentStrings
CommConfigDialogW
WriteFile
VirtualFree
GetEnvironmentStringsW
LocalSize
CloseHandle
GetModuleFileNameA
SetLocaleInfoA
SetFilePointer
InitializeCriticalSection
RtlUnwind
InterlockedExchange
TlsGetValue
SetStdHandle
SetFileAttributesA
FlushFileBuffers
LeaveCriticalSection
GlobalFindAtomW
GetModuleHandleA
lstrcpy
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
HeapAlloc
CommConfigDialogA
SetHandleCount
GetLastError
GetLocalTime
InterlockedDecrement
VirtualQuery
LoadLibraryA
IsBadWritePtr
GetProfileSectionA
GetACP
HeapFree
GetCurrentThread
FreeEnvironmentStringsA
HeapReAlloc
SetThreadAffinityMask
GetCPInfo
QueryPerformanceCounter
GetStringTypeA
GetCurrentProcessId
GetStdHandle
LCMapStringW
InterlockedIncrement
SetEnvironmentVariableA
GetCurrentProcess
OpenMutexA
GetTimeZoneInformation
GetCommandLineA
CompareStringA
SetLastError
FreeEnvironmentStringsW
TlsSetValue
GetDateFormatA
GetSystemTime
CompareStringW

comctl32

InitCommonControlsEx

user32

SetWindowsHookW
ShowWindow
ToUnicode
ShowScrollBar
LoadMenuA
GetMessageA
TranslateAccelerator
LoadImageA
RegisterClassA
GetNextDlgGroupItem
GetClipboardFormatNameW
CreateWindowExA
MessageBoxA
GetWindowDC
GetPropA
DefMDIChildProcW
GetClassWord
DdeKeepStringHandle
OpenInputDesktop
NotifyWinEvent
MenuItemFromPoint
GetSystemMenu
RegisterClassExA

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20f770f6ac053b70ead8bb868607a88c

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

user32

Sections

.text Size: 294KB - Virtual size: 293KB

.rdata Size: 63KB - Virtual size: 87KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 294KB - Virtual size: 293KB

.rdata
Size: 63KB - Virtual size: 87KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 9KB - Virtual size: 8KB