60cb4c9d000bd942058b77e7191959c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

60cb4c9d000bd942058b77e7191959c3_JaffaCakes118
Size

224KB
MD5

60cb4c9d000bd942058b77e7191959c3
SHA1

dd76220afbf7d656296957cf361b5f47f72cdcb4
SHA256

d16c825367b7253be36696270be458e78e6e722cab432aba8a338c8eebd68d5d
SHA512

f99bd74a3d0eb488ac06bdfcfe3962ff61e60d04a7c8f5539a2aeda6062d55e6ac4de5e81958b513c7ed67ee9166d4a9cc4405dff4c1292b1d0c8c668cc931a0
SSDEEP

6144:XTA/h+SE5+lodccmVAXhJ0EZV5aA+tr4j5oc:DDP+luhFnJgtrOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60cb4c9d000bd942058b77e7191959c3_JaffaCakes118

Files

60cb4c9d000bd942058b77e7191959c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc2d9b3289ffd51edac9b745e440b392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LocalLock
TerminateThread
ResetEvent
HeapFree
VirtualProtect
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetEnvironmentStrings
OpenEventA
GetExitCodeProcess
GetTempFileNameA
DeleteTimerQueue
ReleaseSemaphore
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapAlloc
VirtualFree
GetCurrentProcess
Sleep
GetCPInfo
GetOEMCP
GetSystemInfo
GetACP
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW

user32

DestroyWindow
GetParent
LoadCursorA
GetDesktopWindow
GetDC
GetCursorPos
SetTimer
ReleaseDC
ShowWindow
CreateIcon
IsIconic
SetCursorPos
LoadBitmapA
GetWindowRect
SetCursor
SendMessageA

gdi32

GetPixel
CreateHatchBrush
GetBitmapBits

shell32

SHGetFolderLocation

psapi

GetModuleInformation
EnumProcesses

ws2_32

WSAStartup
WSACleanup

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc2d9b3289ffd51edac9b745e440b392

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

psapi

ws2_32

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 64KB - Virtual size: 63KB

.rsrc Size: 128KB - Virtual size: 124KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 64KB - Virtual size: 63KB

.rsrc
Size: 128KB - Virtual size: 124KB