63edecacab371f7bbde1e0b677311119_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

63edecacab371f7bbde1e0b677311119_JaffaCakes118
Size

902KB
MD5

63edecacab371f7bbde1e0b677311119
SHA1

dc6a666a1f233e0c525c7f5b35b774026b9d41a9
SHA256

12bf3ddb26e573256d32de188d9bb3de79fba093fa5543d1c2d014187b38118a
SHA512

e9117f046d2f9394b667cf0deaf805fba840fadb753c3943cd21ee5ca93e88edb293a5fa2069dda1847307b7c5e42b193dc8a4ab623ec9eae551fdd55c2ecf91
SSDEEP

24576:OLOYzZSLlawX8ayaCzr9I80Io54GXP7PepV:YtusNqIi4Gj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63edecacab371f7bbde1e0b677311119_JaffaCakes118

Files

63edecacab371f7bbde1e0b677311119_JaffaCakes118
.exe windows:4 windows x86 arch:x86

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragEnter
DestroyPropertySheetPage
ImageList_GetBkColor
ImageList_Draw

user32

DefMDIChildProcA
ShowScrollBar
GetClipboardSequenceNumber
CheckDlgButton
CloseWindowStation
OpenIcon
EmptyClipboard
GetMenuStringA
DestroyCaret
GetMessageExtraInfo
GetWindowWord
GetClipboardFormatNameA
OpenDesktopA
ChangeClipboardChain
GetMenuItemRect
OpenClipboard
VkKeyScanA
IsCharLowerW
EnumWindowStationsA

kernel32

GetProcessHeap
GetCompressedFileSizeW
ExitProcess
GlobalFlags
GetOEMCP
WritePrivateProfileStringA
WriteFile
ExitThread
LeaveCriticalSection
SetConsoleOutputCP
GetBinaryTypeA
_llseek
IsProcessorFeaturePresent
GenerateConsoleCtrlEvent
QueryDosDeviceW
GetProcessTimes
FreeResource
EraseTape
GetModuleFileNameW
DeleteFiber
GlobalAddAtomW
LCMapStringA
SetConsoleCursorPosition
GlobalAddAtomA
GetACP
CreateProcessA
EnumSystemCodePagesW
WriteConsoleOutputCharacterA
GetVersion
UnhandledExceptionFilter
GetEnvironmentStringsW
GetTimeZoneInformation
GetAtomNameA
GetLocaleInfoW
SetEvent
LocalReAlloc
SetConsoleTitleA
ReadFile
GetBinaryTypeW
EnumCalendarInfoW
GetSystemTimeAsFileTime
lstrcpynA
DeleteCriticalSection

advapi32

ObjectCloseAuditAlarmA
RegFlushKey
RegCreateKeyW
CryptExportKey
QueryServiceLockStatusW
RegQueryValueExA
StartServiceCtrlDispatcherA
StartServiceA
ReportEventW
LookupPrivilegeDisplayNameA
CryptReleaseContext
SetNamedSecurityInfoW
RegUnLoadKeyA
CopySid
SetSecurityDescriptorSacl
UnlockServiceDatabase

msvcrt

_mbsdec
perror
_wtol
_snwprintf
fread
_setmode
_getdcwd
_lseeki64
_beginthread
wcscoll
_itoa
wscanf
_ui64tow
_mbsrchr
_strdup
_chmod
_mbctoupper
mktime
_stricoll
_wsetlocale
ftell
_wstrdate
_controlfp
_isctype
iswxdigit

Sections

.text
Size: 11KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

Imports

comctl32

user32

kernel32

advapi32

msvcrt

Sections

.text Size: 11KB - Virtual size: 227KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 597KB - Virtual size: 596KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 11KB - Virtual size: 227KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 597KB - Virtual size: 596KB

.rsrc
Size: 17KB - Virtual size: 16KB