429952c337d9f10c158590cabcd7b43e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

429952c337d9f10c158590cabcd7b43e_JaffaCakes118
Size

618KB
MD5

429952c337d9f10c158590cabcd7b43e
SHA1

3e4d439f19ae88edd427d70b6a24923ed50c3c2f
SHA256

e447328d4316fe0c886a3ee172452ad51f3abe577ba62a2fd9ebee6bcef92f31
SHA512

a4714dd59629d387fc19135dbda9b416fe94f195fb111a6379fb1b97eec553d40313fb37d42532273a7ea51c5b879ec9ddf3f40457079e910dd086f49b46b893
SSDEEP

12288:O8x9Bg42+uIPkUIOYKw9ltX3wvgicbsTSDg5jNluW:v9Bg/+uI8UvYKwr2vgnoZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429952c337d9f10c158590cabcd7b43e_JaffaCakes118

Files

429952c337d9f10c158590cabcd7b43e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cd2fc2f20d8a6c307aacbc98d6edb46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuW
RegisterClassA
ShowCursor
RegisterClassExA

comdlg32

ReplaceTextA
PageSetupDlgW

comctl32

InitCommonControlsEx

kernel32

lstrlen
DeleteCriticalSection
CompareStringA
Sleep
GetNamedPipeHandleStateW
CompareStringW
WritePrivateProfileStructA
GetACP
GetLocaleInfoA
GetProcAddress
CreateFileA
VirtualFree
GetModuleFileNameA
SetLastError
SetEnvironmentVariableA
ReadFile
FreeEnvironmentStringsW
GetLocaleInfoW
EnterCriticalSection
CloseHandle
TlsGetValue
GetStdHandle
InterlockedDecrement
GetCurrentThreadId
IsValidLocale
SetThreadIdealProcessor
MultiByteToWideChar
GetModuleHandleA
IsDebuggerPresent
SetFilePointer
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
RtlUnwind
OpenMutexA
HeapFree
LCMapStringA
UnhandledExceptionFilter
CreateMutexA
EnumTimeFormatsW
GetStringTypeA
GetFileType
FlushViewOfFile
SetConsoleCtrlHandler
WideCharToMultiByte
EnumSystemLocalesA
HeapCreate
HeapAlloc
LeaveCriticalSection
LoadLibraryA
GetStringTypeW
IsValidCodePage
TlsFree
GetStartupInfoW
GetCommandLineA
FreeLibrary
GetTickCount
GetModuleFileNameW
GetCurrentThread
SetStdHandle
GetDateFormatA
FindFirstFileExW
LCMapStringW
GetCPInfo
GetTimeFormatA
GetConsoleCP
HeapReAlloc
WriteConsoleA
VirtualAlloc
WriteFile
VirtualQuery
GetUserDefaultLCID
GetStartupInfoA
QueryPerformanceCounter
GetModuleHandleW
ExitProcess
GetSystemTimeAdjustment
GetTimeZoneInformation
HeapSize
LocalFileTimeToFileTime
EnumCalendarInfoW
GetConsoleMode
TerminateProcess
SetCurrentDirectoryA
SetUnhandledExceptionFilter
GetCurrentProcess
FileTimeToSystemTime
InterlockedExchange
WriteConsoleW
SetHandleCount
GetConsoleOutputCP
LoadLibraryW
InitializeCriticalSectionAndSpinCount
GetLastError
GetCurrentProcessId
TlsAlloc
FlushFileBuffers
InterlockedIncrement
RtlZeroMemory
GetSystemTimeAsFileTime
TlsSetValue
DosDateTimeToFileTime
HeapDestroy

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cd2fc2f20d8a6c307aacbc98d6edb46

Headers

File Characteristics

Imports

user32

comdlg32

comctl32

kernel32

Sections

.text Size: 240KB - Virtual size: 240KB

.rdata Size: 9KB - Virtual size: 15KB

.data Size: 363KB - Virtual size: 362KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 240KB - Virtual size: 240KB

.rdata
Size: 9KB - Virtual size: 15KB

.data
Size: 363KB - Virtual size: 362KB

.rsrc
Size: 4KB - Virtual size: 4KB