864a29db2c12b4e2120872b63499b3a1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

864a29db2c12b4e2120872b63499b3a1_JaffaCakes118
Size

196KB
MD5

864a29db2c12b4e2120872b63499b3a1
SHA1

8d817529dc146bf64e17e8b5f9a3443918510e37
SHA256

a19ba646d255d37e89873b3b9f5efc1ffc1326cbb548a7161d89acafc779b55e
SHA512

8ef7c1fb6b0bc43514ae8959418f52607c6393e1da9da35bac1a587690dc362ae1a727eba2eae8c98d8913eb6700fbed1d954cac1a5424d5858f59946bdc88ad
SSDEEP

3072:gwXfRT/U4ut20zdsBcw8W+qQEVXEBidxBx1WL1WgNJzyYzJ/NlvDzd:ggrUcxIEVXtxBH2WAbnDzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
864a29db2c12b4e2120872b63499b3a1_JaffaCakes118

Files

864a29db2c12b4e2120872b63499b3a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab8dcdd0ce0fa6db4ae2b4925562c5b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Downloads\Sira\CVS_Work\WildMedia\midaddleUpdater\Release\midaddleUpdater.pdb

Imports

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

userenv

GetUserProfileDirectoryA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetLocaleInfoW
SetEndOfFile
GetLastError
CloseHandle
ReadFile
CreateFileA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
MultiByteToWideChar
DeleteFileA
InterlockedDecrement
SetFileAttributesA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetModuleFileNameA
Sleep
GetVersion
WinExec
WriteFile
GetTempPathA
InterlockedIncrement
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
GetCurrentProcess
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
GetCurrentProcessId
GetTickCount
LocalFree
VirtualQuery
GetStartupInfoA
GetSystemInfo
GetCommandLineA
CopyFileA
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
VirtualAlloc
VirtualProtect
GetModuleHandleA
GetProcAddress
RemoveDirectoryA
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
LeaveCriticalSection
TlsAlloc
SetUnhandledExceptionFilter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
EnterCriticalSection

user32

wsprintfA
SetTimer
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
EndPaint
PostQuitMessage
EndDialog

comdlg32

GetFileTitleA

advapi32

RegQueryValueExA
OpenProcessToken
RegCreateKeyA
RegSetValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetDesktopFolder
ShellExecuteA
SHGetMalloc

ole32

CoInitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid

oleaut32

SysAllocStringLen
VariantClear
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo

shlwapi

PathFileExistsA

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab8dcdd0ce0fa6db4ae2b4925562c5b6

Headers

File Characteristics

PDB Paths

Imports

wininet

userenv

version

kernel32

user32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 48KB - Virtual size: 47KB