67af7ee7c93c4850d410b3ce51244f9d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

67af7ee7c93c4850d410b3ce51244f9d_JaffaCakes118
Size

167KB
MD5

67af7ee7c93c4850d410b3ce51244f9d
SHA1

97ca2f169043c41036aaaa59dd845883d5c4e615
SHA256

7e21ae8a2f213e212c81c661b5aa1e77e838bea6233fd655478b4709f80a1f5f
SHA512

a7d0ff1685f38bd0fdaa0eef4ba554268e063b6bc57d520b406184cb00057fbe8beef385d5143fc287d9f73343b50c88ff406d509ab7cf88d6e75f2696e6a8e1
SSDEEP

3072:j7XdyeLiDIG+MrLE69kHpFLw90lfZSeDIRKe0pewIUW1xTBwUQBzbTFr:j7oeLiDIG+MPE6c2Qz0RKTYv1qdRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67af7ee7c93c4850d410b3ce51244f9d_JaffaCakes118

Files

67af7ee7c93c4850d410b3ce51244f9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
TlsGetValue
GetFullPathNameA
GetOEMCP
GetThreadIOPendingFlag
HeapCreate
EnterCriticalSection
MultiByteToWideChar
GetStringTypeW
CloseHandle
IsBadCodePtr
GetFullPathNameW
FreeLibrary
ResetEvent
GlobalAlloc
GetSystemTime
lstrcmpW
GetCPInfo
GetEnvironmentStringsW
TlsAlloc
GetFileType
GetStartupInfoA
SetPriorityClass
InterlockedIncrement
HeapAlloc
ReleaseSemaphore
GetPriorityClass
UnmapViewOfFile
SetEvent
LeaveCriticalSection
lstrcpyA
IsBadReadPtr
FileTimeToSystemTime
CompareStringA
GetACP
LoadLibraryA
CreateThread
HeapSize
CreateMutexA
TransmitCommChar
GlobalUnlock
DeleteCriticalSection
GetPrivateProfileStringA
lstrcmpA
ExitThread
ExitProcess
RaiseException
FlushFileBuffers
GetCommandLineA
InterlockedExchange
LCMapStringW
GetEnvironmentStrings
CreateFileW
Sleep
SetStdHandle
CreateFileMappingA
GetStdHandle
LCMapStringA
GetModuleHandleA
EnumResourceNamesW
IsBadWritePtr
MapViewOfFile
ExitProcess
GetTempPathA
InterlockedDecrement
GetEnvironmentVariableA
FreeEnvironmentStringsW
CreateSemaphoreA
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
TlsSetValue
WriteFile
WaitForSingleObject
GetUserDefaultLCID
GetDiskFreeSpaceExA
SetEndOfFile
LoadLibraryW
UnhandledExceptionFilter
CompareStringW
GlobalFree
GetProcAddress
SetHandleCount
GetLastError
FileTimeToLocalFileTime
WritePrivateProfileStringA
TlsFree
HeapFree
GetCurrentThreadId
IsDBCSLeadByte
GetTempFileNameA
SetLastError
GetThreadPriority
HeapDestroy
GetStringTypeA
OutputDebugStringA
GetTimeZoneInformation
InitializeCriticalSection
GetCurrentProcess
GetTickCount
RtlUnwind
GetTempPathW
HeapReAlloc
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

user32

CharUpperA
CharNextA
MessageBoxA
wsprintfW
GetKeyState
wsprintfA
CharLowerA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

Imports

kernel32

msimg32

shlwapi

advapi32

user32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.crt
Size: 512B - Virtual size: 68KB