afd747d5e96af3ee2b77b05f2a6c183a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

afd747d5e96af3ee2b77b05f2a6c183a_JaffaCakes118
Size

368KB
MD5

afd747d5e96af3ee2b77b05f2a6c183a
SHA1

9d155e9f272f026947216436e3ef8a0c686d481b
SHA256

d8b164c1339adea125b225986f3124d5b77090e8fd472d287003d4c3e41656f9
SHA512

75c71d7983d5649401a22c7d18e1ea02a920b337cc15e51479b2a311cd6b4d35597135db4f6989b1228d7173a9bd440a188f99e2d3a2de4e73924a438b41c384
SSDEEP

6144:89U76MhxRjhhVnXtHCmDlFoBNOfwHmUWxTZ11OQymXPr8Wi2zV4CxUgnDAUWD+yj:89U76MhxBhhVnXspBAfydWxTZOQym/4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd747d5e96af3ee2b77b05f2a6c183a_JaffaCakes118

Files

afd747d5e96af3ee2b77b05f2a6c183a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c96bdf028f2e8408cfb754a53e36fe48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\qev\fvemuenov\kyyue\drtnqsxae\cdxhktyhq.pdb

Imports

kernel32

GetPrivateProfileIntA
VirtualFree
InterlockedExchange
ReadConsoleOutputCharacterW
CompareStringA
SetStdHandle
LeaveCriticalSection
TerminateProcess
VirtualProtect
CreateMutexA
GetCommandLineW
TlsGetValue
RemoveDirectoryA
GetCurrentProcess
SetFilePointer
GetTimeZoneInformation
GetLastError
DeleteCriticalSection
GetProcAddress
HeapDestroy
GetSystemTime
GetFileType
ExitProcess
SetConsoleOutputCP
SetThreadAffinityMask
WriteFile
FreeEnvironmentStringsW
LoadLibraryA
SetLastError
TlsFree
SetHandleCount
GetEnvironmentVariableW
LCMapStringA
UnhandledExceptionFilter
SetEnvironmentVariableA
MultiByteToWideChar
RtlUnwind
ReadFile
InterlockedDecrement
CloseHandle
GetStartupInfoA
lstrcmpi
CreateWaitableTimerA
GetCurrentThreadId
GetStringTypeW
GetLocalTime
GetVersion
HeapFree
GetSystemTimeAsFileTime
GetCPInfo
GetTickCount
GetStartupInfoW
GetCommandLineA
HeapReAlloc
GetEnvironmentStrings
GetShortPathNameW
WriteConsoleInputW
WideCharToMultiByte
SetFileAttributesW
VirtualAlloc
FreeEnvironmentStringsA
lstrcpyA
FlushConsoleInputBuffer
InitializeCriticalSection
OpenMutexA
EnterCriticalSection
GetStdHandle
GetCurrentThread
HeapAlloc
InterlockedIncrement
GetModuleHandleA
GetEnvironmentStringsW
TlsAlloc
GetModuleFileNameW
TlsSetValue
GetCurrentProcessId
IsBadWritePtr
GetStringTypeA
GetModuleFileNameA
LCMapStringW
QueryPerformanceCounter
FlushFileBuffers
CompareStringW
HeapCreate
EnumResourceLanguagesW
VirtualQuery

comctl32

ImageList_Merge
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_Read
CreateUpDownControl
InitCommonControlsEx
ImageList_GetIcon
ImageList_GetBkColor
DrawStatusText
ImageList_SetDragCursorImage
CreateToolbar
CreateMappedBitmap
ImageList_DrawEx
ImageList_DragEnter
ImageList_Copy
ImageList_SetIconSize
ImageList_DragLeave
ImageList_SetFlags

user32

DdeConnect
ScrollDC
MessageBoxA
GetClipboardFormatNameA
SendNotifyMessageA
EnumWindowStationsW
RegisterClassExA
IsCharAlphaW
GetMenuInfo
CreateWindowExA
GetMenuState
DestroyWindow
ShowWindow
GetKeyboardLayoutList
GrayStringW
CopyAcceleratorTableW
DialogBoxIndirectParamA
EnumDisplaySettingsA
FreeDDElParam
RegisterClassA
BeginPaint
GetDCEx
DefWindowProcA

comdlg32

FindTextW
LoadAlterBitmap
GetSaveFileNameA
GetFileTitleA

gdi32

GetObjectW
Polyline
EnumFontsA
SetPixelV
GetDeviceCaps
SetICMProfileW
DeleteDC
CreateDCW
AngleArc
DeleteObject

shell32

ShellExecuteExW
FreeIconList
ShellExecuteW

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c96bdf028f2e8408cfb754a53e36fe48

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

user32

comdlg32

gdi32

shell32

Sections

.text Size: 206KB - Virtual size: 206KB

.rdata Size: 16KB - Virtual size: 27KB

.data Size: 89KB - Virtual size: 88KB

.rsrc Size: 55KB - Virtual size: 55KB

.text
Size: 206KB - Virtual size: 206KB

.rdata
Size: 16KB - Virtual size: 27KB

.data
Size: 89KB - Virtual size: 88KB

.rsrc
Size: 55KB - Virtual size: 55KB