d2dfb49771ee09ddfad38d3cf6a136b3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2dfb49771ee09ddfad38d3cf6a136b3_JaffaCakes118
Size

583KB
MD5

d2dfb49771ee09ddfad38d3cf6a136b3
SHA1

d7a81dfb8e275829448328647a1ee705ae569227
SHA256

471f4b72132db594cc744099aac12a157eb6bed7f0860990d31c4414f8cda8c0
SHA512

8f7581a212874ddd1ff8886474a6229a6455624dcaa461a2f161d9e003a12fcf01908657316a897f63a5ccacca6769d11e9f09e78fad50dc264ec51b84b3e170
SSDEEP

12288:pzmh+wXUsSm3bty1l6nYrPiAdvQHcCq/RVT074L1yOc:5mA4UsSOyv6n+vQHQrtL1yT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2dfb49771ee09ddfad38d3cf6a136b3_JaffaCakes118

Files

d2dfb49771ee09ddfad38d3cf6a136b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d6186886010f12cad47b398bf46b37ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
HeapSize
GetCPInfo
GetCommandLineW
GetCurrentProcessId
SizeofResource
GlobalUnlock
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
GetProcessHeap
GetProcAddress
DeleteFileW
GetWindowsDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
InterlockedIncrement
GetVersion
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
GetACP
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
GetModuleFileNameW
InterlockedDecrement
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
SetEvent
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetTimeZoneInformation
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetFileAttributesA
FreeEnvironmentStringsW
CreateFileA
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
GetLocalTime
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetStdHandle
GetCommandLineA
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetCurrentThreadId
TlsAlloc
SetLastError
GetEnvironmentVariableA
VirtualFree
RtlUnwind
GetEnvironmentStrings
HeapCreate
Sleep
VirtualAlloc
CreateThread
GetOEMCP

user32

SetForegroundWindow
GetDesktopWindow
SendMessageA
LoadCursorA
ScreenToClient
GetDlgItem
SetWindowTextA
SetWindowLongA
GetSystemMetrics
DefWindowProcA
KillTimer
SetFocus
EndPaint
CreateWindowExA
GetWindowLongA
IsWindowEnabled
TranslateMessage
SetWindowPos
PeekMessageA
EnableWindow
GetParent
GetMessageA
DestroyWindow
UnregisterClassA
GetCursorPos
GetDC
DispatchMessageA
IsWindow
PostQuitMessage
MapWindowPoints
GetFocus
SystemParametersInfoA
wsprintfA
DrawTextA
GetClientRect
EndDialog

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6186886010f12cad47b398bf46b37ea

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 556KB - Virtual size: 556KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 556KB - Virtual size: 556KB

.rsrc
Size: 5KB - Virtual size: 5KB