a9dea7f81ec70e0bd68275d52aea1b6c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a9dea7f81ec70e0bd68275d52aea1b6c_JaffaCakes118
Size

330KB
MD5

a9dea7f81ec70e0bd68275d52aea1b6c
SHA1

3570b719af66c88e4d7d9b18c3d04e185196e72e
SHA256

54eeadd29bc3b0301b72e703600b0e197492ec25348af22ca2030625d2ed7225
SHA512

ee2b98d59af9bd3c0315d4a0b260e19bade22bd4f49b7616b7c9b20be8b50afa90ce8717b8344b0cc56b03d95616d0be923ac91f96cae605361e8a13e645d162
SSDEEP

6144:fPDbM/WODbYQViye3PfcKrKyw+ek+MPguRTY:fro+OXFWdGyFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9dea7f81ec70e0bd68275d52aea1b6c_JaffaCakes118

Files

a9dea7f81ec70e0bd68275d52aea1b6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f324dc3baaf669694ba68468b4637d67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-2.0-w32-bld\build\obj-firefox\toolkit\mozapps\update\updater\updater.pdb

Imports

kernel32

SetEndOfFile
CreateProcessW
LocalFree
MoveFileExW
CreateFileW
MultiByteToWideChar
WaitForSingleObject
GetLastError
GetPrivateProfileStringW
FindClose
GetModuleHandleW
GetModuleFileNameW
CompareStringA
FormatMessageW
SetFilePointer
GetStringTypeW
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
InitializeCriticalSection
LoadLibraryA
CloseHandle
FlushFileBuffers
CopyFileW
Sleep
FindFirstFileW
OpenProcess
GetLocaleInfoA
GetTempFileNameW
IsValidCodePage
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
CreateDirectoryW
RemoveDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
DeleteFileW
MoveFileW
ExitThread
GetCurrentThreadId
CreateThread
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetFileAttributesW
SetFileAttributesW
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesA
HeapReAlloc
GetDriveTypeA
CreateFileA
GetProcAddress
GetModuleHandleA
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetFullPathNameW
GetCurrentDirectoryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
HeapSize
RaiseException
VirtualAlloc
SetStdHandle
ReadFile
GetCPInfo
GetACP
GetOEMCP
CompareStringW

user32

SetTimer
GetClientRect
GetDC
LoadIconW
OffsetRect
ReleaseDC
GetDlgItem
EndDialog
CopyRect
SetWindowPos
GetDesktopWindow
ScreenToClient
GetWindowRect
DrawTextW
SendMessageW
SetWindowTextW
DialogBoxParamW
GetParent

gdi32

SelectObject

wsock32

ntohl

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

comctl32

InitCommonControlsEx

shell32

ShellExecuteExW

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f324dc3baaf669694ba68468b4637d67

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

wsock32

advapi32

comctl32

shell32

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 96KB - Virtual size: 93KB

.reloc Size: 8KB - Virtual size: 7KB

.rrdata Size: 76KB - Virtual size: 76KB

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 96KB - Virtual size: 93KB

.reloc
Size: 8KB - Virtual size: 7KB

.rrdata
Size: 76KB - Virtual size: 76KB