67c4d616512011927e8da1ad6594bc36_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

67c4d616512011927e8da1ad6594bc36_JaffaCakes118
Size

162KB
MD5

67c4d616512011927e8da1ad6594bc36
SHA1

8d8b21d438f6a8bf6e3138d4a7ed30ff67cb9e65
SHA256

a48c0f1a165c2b193ef669fe82d238d99fe27897a37077356f13ca44bfcbe26e
SHA512

15e6db0889edcc3a5222a3a86c68ab956ce10a496c94ff931b7133a08de2a2fefcd622bb10fc01dd25f9e21351f404509a47f774cf79d3d4e2065972a1d6ab6f
SSDEEP

3072:QsHIlUREbWTKqCNEaOgqTPlSJYWuF0RXsQnfG5qjYW0JjJKLdutzi:J0U5CFklh9KnfGeYWWFKL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67c4d616512011927e8da1ad6594bc36_JaffaCakes118

Files

67c4d616512011927e8da1ad6594bc36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9726aaee8ab67b371189aeeacb89d99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetEnvironmentStrings
FreeLibrary
WriteConsoleInputVDMA
GetVersionExW
GetConsoleMode
LocalFree
WriteFile
DeleteCriticalSection
GetFileAttributesW
SetStdHandle
InterlockedCompareExchange
GetStartupInfoA
IsDebuggerPresent
LoadLibraryW
GetConsoleOutputCP
FlushInstructionCache
GetStdHandle
GetSystemDirectoryW
HeapSize
WriteConsoleA
GetCPInfo
GetModuleFileNameA
LockResource
GetCurrentProcessId
GetCommandLineW
InterlockedIncrement
GetProcessHandleCount
GetOEMCP
GetLocaleInfoA
TlsSetValue
LocalAlloc
VirtualFree
GetCurrentThreadId
LoadResource
GetConsoleCP
WaitForSingleObject
CreateFileMappingW
GetStringTypeW
HeapDestroy
CopyFileW
MulDiv
SetFilePointer
ExitProcess
RaiseException
GetStartupInfoW
CreateFileW
GetProcAddress
RtlUnwind
TlsGetValue
CreateProcessW
CloseHandle
EnumResourceNamesA
TlsAlloc
IsProcessorFeaturePresent
GetCommandLineA
HeapFree
LeaveCriticalSection
WideCharToMultiByte
InterlockedDecrement
FindResourceW
LoadLibraryExW
GetStringTypeA
CreateSemaphoreW
CreateFileA
GetVersion
SetLastError
TlsFree
GetLastError
FreeEnvironmentStringsA
GetDriveTypeW
GetCurrentProcess
ReadFile
GetTickCount
SetUnhandledExceptionFilter
LCMapStringW
WritePrivateProfileSectionW
InitializeCriticalSection
GetFileType
FreeEnvironmentStringsW
SetHandleCount
GetModuleHandleW
GetModuleFileNameW
SizeofResource
GetVersionExA
LCMapStringA
FlushFileBuffers
lstrlenA
GetACP
HeapReAlloc
LoadLibraryA
VirtualAlloc
GetThreadLocale
GetSystemTimeAsFileTime
GetModuleHandleA
lstrcmpiW
WriteConsoleW
QueryPerformanceCounter
GetProcessHeap
UnhandledExceptionFilter
InterlockedExchange
HeapAlloc
HeapCreate
GetEnvironmentStringsW
GetFileSize
Sleep
DeleteFileW
lstrcmpA
lstrlenW

shell32

SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW

user32

GetDlgItemTextW
DestroyWindow
GetDlgItem
GetClientRect
GetWindow
GetWindowRect
RegisterClassExW
SetWindowTextW
GetParent
PeekMessageW
MapWindowPoints
SetDlgItemTextW
SetCapture
SetWindowPos
GetWindowInfo
MessageBoxW
BeginPaint
LoadCursorW
DispatchMessageW
GetClassInfoExW
SystemParametersInfoW
CreateWindowExW
EndPaint
TranslateMessage
GetWindowTextLengthW
GetDC
EndDialog

ole32

CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoInitialize

msvfw32

ICInfo

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idive
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9726aaee8ab67b371189aeeacb89d99f

Headers

File Characteristics

Imports

kernel32

shell32

user32

ole32

msvfw32

gdi32

version

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 70KB - Virtual size: 70KB

.idive Size: 1024B - Virtual size: 244KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 70KB - Virtual size: 70KB

.idive
Size: 1024B - Virtual size: 244KB