b7faecde33c311a3ba0a48581b4d0446_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b7faecde33c311a3ba0a48581b4d0446_JaffaCakes118
Size

191KB
MD5

b7faecde33c311a3ba0a48581b4d0446
SHA1

7d4efbc31ea8a7b953ef07ffd35d3a8dad17f4e0
SHA256

839f84b017f75dcc847e0cf369ce2d0b5c8426066c23745977b31e84b476d048
SHA512

c9882a21cf66c181c6ba3d55377bb993ac04eb810adecd573fd0755f69bd9751dae9e3d2ad8338f0697bf9e1146b912de0f32494a4c5d6316bcba155c8e9dfb7
SSDEEP

3072:YHWoqyq/QApMeIjWr0oBTdbMSeJ95il9hlEwE4sOTcNhMHZjGQ9J3HYJT84:YHWoq20KAXTMS2vWgwEVOTGef34JT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7faecde33c311a3ba0a48581b4d0446_JaffaCakes118

Files

b7faecde33c311a3ba0a48581b4d0446_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DEVE1OPMENT\VC+-\Cry4tor54volu\iongold\release\main.pdb

Imports

kernel32

GetTempFileNameA
GetFileAttributesA
FindFirstChangeNotificationA
DeleteFileA
CopyFileA
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
InterlockedCompareExchange
InterlockedIncrement
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
HeapWalk
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
CreateProcessW
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
MoveFileW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetSystemInfo
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
GetVersionExA
GetStartupInfoA

user32

CreatePopupMenu
GetDoubleClickTime
SetCursor
IntersectRect
InsertMenuItemA
ClientToScreen
InflateRect
IsClipboardFormatAvailable
SetForegroundWindow
DrawIcon
LoadImageA
OffsetRect
SendDlgItemMessageW
TrackPopupMenu
GetCursorPos
RegisterClassExA
GetClassInfoExA
GetSysColorBrush
GetActiveWindow
AppendMenuA
GetWindowLongA
CallWindowProcA
DrawFrameControl
FillRect
IsDialogMessageW
PostMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetWindowLongA
CheckRadioButton
EndDialog

ws2_32

WSASocketA
WSAGetOverlappedResult
WSACreateEvent
WSAConnect
socket
WSAStartup
WSACleanup
accept
bind
closesocket
connect
gethostbyaddr

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f945d5ffcc03a717fd7962c52e1943ea

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

ws2_32

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 77KB

.rsrc Size: 1024B - Virtual size: 940B

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 77KB

.rsrc
Size: 1024B - Virtual size: 940B