a17e3fdeda64817b666ccf21e1166a8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a17e3fdeda64817b666ccf21e1166a8c_JaffaCakes118
Size

562KB
MD5

a17e3fdeda64817b666ccf21e1166a8c
SHA1

0df29c59e91336bea025dae4ef697893ba44d2aa
SHA256

9e4c8ecbce025a1f676b9b69410a6b47a1505f0e5f525ad800d4a1c8d4ff71ce
SHA512

18aa78807a059255d4c4ec02d787f0093f40001325ddfa3ea6227e1dff325f58102ad630f832ca14ac0c8a25666b9c53ab61ea2bbcf3f08fa241afcac2f3eb5f
SSDEEP

12288:KwVs+g0bhjnNhs/5lppCe8d43SETZGXBso+XDOq1vuBuQtJi:KwVlfnsBudUSElGXi5UuQtJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a17e3fdeda64817b666ccf21e1166a8c_JaffaCakes118

Files

a17e3fdeda64817b666ccf21e1166a8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4f945ab6672178131fd1a0a0f91f001

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

user32

PeekMessageA
TrackPopupMenuEx
RegisterClassA
WaitMessage
RegisterClassExA
LookupIconIdFromDirectory

gdi32

GetGlyphOutline
GdiPlayJournal
PolyTextOutA
CombineTransform
SetMetaFileBitsEx

kernel32

IsValidCodePage
GetTimeFormatA
GetTimeZoneInformation
RtlUnwind
GetCurrentProcessId
TerminateProcess
GetModuleHandleA
GetStartupInfoW
SetHandleCount
GetModuleFileNameW
SetLastError
GetUserDefaultLCID
GetProcAddress
GetVersionExA
OpenProcess
CompareStringW
HeapFree
CompareStringA
GetTickCount
GetStartupInfoA
GetDateFormatA
WriteFile
SetStdHandle
HeapCreate
InterlockedExchange
FindAtomA
VirtualFree
DeleteCriticalSection
HeapReAlloc
FreeEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
HeapDestroy
GetEnvironmentStrings
HeapAlloc
LCMapStringW
ExitProcess
VirtualQuery
EnterCriticalSection
GetConsoleMode
VirtualProtect
HeapSize
MultiByteToWideChar
TlsSetValue
TlsFree
GetStringTypeA
GetLastError
VirtualAlloc
GetConsoleTitleW
GetStdHandle
GetOEMCP
GetSystemInfo
GetCurrentThread
GetCurrentThreadId
GetWindowsDirectoryW
SetFilePointer
CreateMutexA
GetACP
SetEnvironmentVariableA
EnumSystemLocalesA
GetCommandLineW
LoadLibraryA
WideCharToMultiByte
GetSystemTimeAsFileTime
GetLocaleInfoA
GetCommandLineA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetModuleFileNameA
VirtualFreeEx
GetFileType
GlobalGetAtomNameA
GetLocaleInfoW
LocalUnlock
LCMapStringA
GetConsoleTitleA
IsValidLocale
InitializeCriticalSection
TlsGetValue
TlsAlloc
FreeEnvironmentStringsA
FlushFileBuffers
GetMailslotInfo
LeaveCriticalSection
ReadFile
GetCPInfo
IsBadWritePtr
GetCurrentProcess
CloseHandle
OpenMutexA

comctl32

InitCommonControlsEx

Sections

.text
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4f945ab6672178131fd1a0a0f91f001

Headers

File Characteristics

Imports

shell32

user32

gdi32

kernel32

comctl32

Sections

.text Size: 231KB - Virtual size: 231KB

.rdata Size: 8KB - Virtual size: 31KB

.data Size: 317KB - Virtual size: 316KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 231KB - Virtual size: 231KB

.rdata
Size: 8KB - Virtual size: 31KB

.data
Size: 317KB - Virtual size: 316KB

.rsrc
Size: 4KB - Virtual size: 4KB