599ac24166ccba3dab1d5ef782285b02_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

599ac24166ccba3dab1d5ef782285b02_JaffaCakes118
Size

60KB
MD5

599ac24166ccba3dab1d5ef782285b02
SHA1

e4a95681264d294e3cbc9104c4b0a9a38f50a989
SHA256

936684c5f534a896414c04d3f714d837fb3ae5fb4881ed1b8d501f63aea8f019
SHA512

cc28ab058e4e2ad3ddff167bfd2b95c4c71b961c54f957b1e70e7d59f53dcfea622db2989b1b4f213fe49437b818be717cfe2c4a9d488850e3587d78065e91df
SSDEEP

1536:lb0aiiz5PHwQce7YEhfqaW1qLs2I17Ui3Q:lb0aT53RlqaW14sLrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599ac24166ccba3dab1d5ef782285b02_JaffaCakes118

Files

599ac24166ccba3dab1d5ef782285b02_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetDateFormatA
GlobalAddAtomW
InterlockedDecrement
GetProcessVersion
DeviceIoControl
GetProcAddress
lstrcmpW
FormatMessageW
GetPrivateProfileIntW
GetFileAttributesW
WideCharToMultiByte
LocalLock
InterlockedIncrement
CreateDirectoryW
HeapFree
CreateFileW
SetLastError
GetTempPathW
WriteFile
SetFilePointer
GetTimeFormatW
DuplicateHandle
CloseHandle
CopyFileW
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetPrivateProfileSectionW
GetModuleHandleA
GetWindowsDirectoryW
GetFileSize
lstrcmpiW
ReadFile
DnsHostnameToComputerNameA
IsWow64Process
GetFullPathNameW
GlobalWire
GetExitCodeProcess
lstrlenA
BackupRead
GetTempPathA
GetProcessHeap
FreeLibrary
GetSystemDirectoryW
IsValidLocale
LocalAlloc
GetVolumeInformationW
SetThreadPriority
GlobalFree
GetThreadLocale
CreateFileA
IsBadCodePtr
SwitchToThread
lstrlenW
GetTickCount
GetFileTime
HeapAlloc
GetDateFormatW
RaiseException
SetCurrentDirectoryW
GetCurrentProcess
RemoveDirectoryA
WaitNamedPipeW
GetCommandLineW
LocalReAlloc
ReleaseMutex
GetStartupInfoA
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
GetLogicalDriveStringsW
GetPrivateProfileStringW
LocalFree
CreateMutexW

gdi32

GetStockObject

user32

GetWindowDC
IsRectEmpty
GetWindowInfo
SetFocus

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 117KB

.rxdata Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 243KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 117KB

.rxdata
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 243KB