4051e333c97e0ea9672631b4b094593d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4051e333c97e0ea9672631b4b094593d_JaffaCakes118
Size

191KB
MD5

4051e333c97e0ea9672631b4b094593d
SHA1

fcce44b217c22f0460cc189afa02057365aa02b1
SHA256

e6016b325dbc9f1f49bed5904d2532516d290f10db1c890da2176d3ae5f344a1
SHA512

940d15b1bea79597e0193a48deb796b645095f920f8e7a3eadc7758e61f788e0724ddcf90fbbd839c3c8d1e9f432635bf5ef4763ac98110309390ffb0efc4e8d
SSDEEP

3072:1HWoqyq/QApMeIjWr0oBTdbMSeJ95ilKmhlEwE4sOTcNhMHZjGQ9J3HYJT84:1HWoq20KAXTMS2vhmgwEVOTGef34JT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4051e333c97e0ea9672631b4b094593d_JaffaCakes118

Files

4051e333c97e0ea9672631b4b094593d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DEVE1OPMENT\VC+-\Cry4tor54volu\iongold\release\main.pdb

Imports

kernel32

GetTempFileNameA
GetFileAttributesA
FindFirstChangeNotificationA
DeleteFileA
CopyFileA
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
InterlockedCompareExchange
InterlockedIncrement
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
HeapWalk
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
CreateProcessW
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
MoveFileW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetSystemInfo
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
GetVersionExA
GetStartupInfoA

user32

CreatePopupMenu
GetDoubleClickTime
SetCursor
IntersectRect
InsertMenuItemA
ClientToScreen
InflateRect
IsClipboardFormatAvailable
SetForegroundWindow
DrawIcon
LoadImageA
OffsetRect
SendDlgItemMessageW
TrackPopupMenu
GetCursorPos
RegisterClassExA
GetClassInfoExA
GetSysColorBrush
GetActiveWindow
AppendMenuA
GetWindowLongA
CallWindowProcA
DrawFrameControl
FillRect
IsDialogMessageW
PostMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetWindowLongA
CheckRadioButton
EndDialog

ws2_32

WSASocketA
WSAGetOverlappedResult
WSACreateEvent
WSAConnect
socket
WSAStartup
WSACleanup
accept
bind
closesocket
connect
gethostbyaddr

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ws2_32

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 77KB

.rsrc Size: 1024B - Virtual size: 940B

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 77KB

.rsrc
Size: 1024B - Virtual size: 940B