49aa1961f26e9a48f5d943636563eb87_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

49aa1961f26e9a48f5d943636563eb87_JaffaCakes118
Size

119KB
MD5

49aa1961f26e9a48f5d943636563eb87
SHA1

c01eb7f57cfddcc5de8a682c6c0be0938f848a12
SHA256

d0d2eb6e777a9f2b2dfb8886c36beb98973ac131cbddaf184a5970be12c8e6f8
SHA512

83969c8d2c9b4cf0b8ab52e62b74a9f161145cea720ec5d028bf9f2f50fa8d79848730875388941bbe2206fdcd432989986a167d68e6bb70b62638ede0fced39
SSDEEP

3072:t6/P2tbyRKvKLo0Zkyri/8LDwJQrPcfcH+:Q/ehZ7W/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aa1961f26e9a48f5d943636563eb87_JaffaCakes118

Files

49aa1961f26e9a48f5d943636563eb87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
GetWindowsDirectoryA
_lclose
FreeLibrary
HeapAlloc
ExitThread
FindFirstFileW
GetLastError
GetStringTypeW
WriteConsoleW
CallNamedPipeW
OutputDebugStringA
GetCurrentProcess
CallNamedPipeA
GetProcAddress
GetModuleHandleA
CreateHardLinkA
VirtualAlloc
LoadLibraryW
DeleteAtom
lstrlenA

msvcrt

_exit
_iob
_except_handler3
strncpy
_wtol
swprintf
wcscat
_purecall
_controlfp
_vsnprintf
_snwprintf
isalpha
wcscpy
isdigit
__initenv
__CxxFrameHandler
wcscmp
_ftol
_c_exit
__dllonexit
_wcmdln
malloc
swscanf
wcschr
__p__fmode
_adjust_fdiv
free
__winitenv
memcpy
_cexit
__p__commode
wcslen

user32

GetProcessWindowStation
ReleaseDC
LoadImageW
GetCursorPos
MapWindowPoints
CopyRect
SetCapture
DispatchMessageW
LoadCursorW
DestroyWindow
SetScrollPos
DialogBoxParamA
RegisterClassA
GetParent
LoadCursorA
wsprintfW
SendMessageA
ClientToScreen
LoadMenuW
ReleaseCapture
CheckDlgButton
BeginPaint
ScreenToClient
IsWindow
SendMessageW
GetMenuItemCount
UnregisterClassW

shell32

SHGetFolderPathW
SHGetFileInfoW
SHGetPathFromIDListW
ShellExecuteW

opengl32

wglShareLists
glColor4i
glTexCoord2d
GlmfBeginGlsBlock
glColor4f
glColor3ui
glColor4d
glStencilMask
glFogfv
glTexCoord2dv

Exports

Exports

KmmbTobyhhTytqsGf
BxsUoytkpPsl
TanudMqnek

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

187c70f0d762b1276768c11331173463

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

shell32

opengl32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 124B

.data Size: 68KB - Virtual size: 67KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 124B

.data
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 102B