62d948fd6ad92741d463d44d3d76b47e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

62d948fd6ad92741d463d44d3d76b47e_JaffaCakes118
Size

138KB
MD5

62d948fd6ad92741d463d44d3d76b47e
SHA1

3d6fe6028b43393b2df4602f02ae251af2fe7743
SHA256

05e0e56f581554f7613ce9a2a20d5a53b5cec6b60fd2485fa2ad8abc811be2d6
SHA512

f530e1742d35b3e5373abd90ee62fc27a5af0cf94a28a2ee18aceffd5747ef2fd860f6da172fb5fc05f10cdc3910b3bc7e753c4aaad91754731455e23c0fc149
SSDEEP

3072:y9mbN+SSpdHkCAteJVZK9OQZxSJrsOFFFFBFFFFI5+JU6CovrGE:UwN+SQYOQZsrsyOoDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d948fd6ad92741d463d44d3d76b47e_JaffaCakes118

Files

62d948fd6ad92741d463d44d3d76b47e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

67cdca2b70d755b7847398e39c1c4654

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

memmove
strstr
_stat64i32
_wcslwr
wcsncpy
_utime64
wcsstr
sprintf
memset
fputs
_time64
_mktime64
_ctime64
_stricmp
_wcsicmp
remove
??2@YAPAXI@Z
fseek
ftell
__CxxFrameHandler3
strncpy
fclose
fopen
_vswprintf
strtol
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
??3@YAXPAX@Z
_purecall

kernel32

InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
CreateMutexA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
CreateFileW
CloseHandle
RemoveDirectoryW
InterlockedExchange
FindNextFileW
DeleteFileW
FindFirstFileW
MultiByteToWideChar
GetModuleHandleA
GetVersionExA
GetSystemDirectoryW
DeleteFileA
MoveFileA
GetFileAttributesW
GetLastError
CreateDirectoryW
FindFirstFileA
FindNextFileA
WinExec
FindClose
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA

ole32

CoTaskMemFree

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mnbsnev
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67cdca2b70d755b7847398e39c1c4654

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

advapi32

ole32

version

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 37KB - Virtual size: 38KB

mnbsnev Size: - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 37KB - Virtual size: 38KB

mnbsnev
Size: - Virtual size: 4KB