727a31590aa7ef4bf58d542a69573399_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

727a31590aa7ef4bf58d542a69573399_JaffaCakes118
Size

2.2MB
MD5

727a31590aa7ef4bf58d542a69573399
SHA1

60684b9be2a5760f0fc9044fdb43468a31ee9fdb
SHA256

e73b84f7ec683f8205a0b93326c4c3bd9589cf24ad4afe0138f3173071d78a43
SHA512

c22992e5b25996ec1bb8a8ba79ac313fff424abd3a37b40fd0a6e72daeab846806ff901d0512255d59cbc7e4d4b88684e224edbffd1c0bbabaa4217ff265fc6b
SSDEEP

24576:nPKtKTus5xaA43R0Wipxn1zmmRDji24YIYh8a8KoXnRYwQZQhbwOB7LokdQnaleP:ZAhnajijeqTKo3awQTrweBN/RSa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
727a31590aa7ef4bf58d542a69573399_JaffaCakes118

Files

727a31590aa7ef4bf58d542a69573399_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40d7877a910a72fd7379848d08aaec62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

MakeSureDirectoryPathExists

kernel32

SetEvent
GetExitCodeThread
CreateProcessA
GetShortPathNameA
GetSystemTime
CopyFileA
SetFileTime
LocalFree
ReadFile
LocalAlloc
GetFileSize
WriteFile
SetFilePointer
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
DeleteFileA
GetTempPathA
WaitForSingleObject
GetTickCount
GetWindowsDirectoryA
GetSystemDirectoryA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
SetEndOfFile
CloseHandle
CreateMutexA
GetLastError
CreateEventA
CreateThread
GetModuleFileNameA
GetCurrentDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
MoveFileA
GetFileAttributesA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

EndDialog
SendDlgItemMessageA
GetDlgItem
UpdateWindow
SetDlgItemTextA
ShowWindow
SetWindowTextA
DialogBoxParamA
DestroyIcon
PostQuitMessage
LoadIconA
SendMessageA
PostMessageA
CreateDialogParamA
MessageBoxA
GetMessageA
DispatchMessageA
IsDialogMessageA
TranslateMessage

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40d7877a910a72fd7379848d08aaec62

Headers

File Characteristics

Imports

imagehlp

kernel32

user32

advapi32

comctl32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 25KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 25KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB