d41775a0cb26ddde5968835354bb8d80_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d41775a0cb26ddde5968835354bb8d80_JaffaCakes118
Size

1.3MB
MD5

d41775a0cb26ddde5968835354bb8d80
SHA1

649ee8d38c4b50f42567e5a60682b4f6f9566628
SHA256

fafa5c30084ca0950535b288a34a69e4211d3a2705fea6d79202c81f1be3bbf6
SHA512

65e95db40f0316d0d6cfa0d2318e39a0f3a802f4a736e2524fec04fb7cf48320dcf0b04248d6fbb1267e421c5429fdf5df31a0b4615bbea25899eadd9a30dc1a
SSDEEP

24576:QXZeFlXwWbkAYEDsZg6eE8OC7iMbQh7DSgnfsTJ0Uj3bckB8MuPdPktbJ16Kp9i:QQAWbF+GDiMynUT2Q3bSU9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d41775a0cb26ddde5968835354bb8d80_JaffaCakes118

Files

d41775a0cb26ddde5968835354bb8d80_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fe9aefb2b11dd3cdd2b2a3e6b738e653

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Home\noboru\SRC\qaac\vcproject\Release\refalac.pdb

Imports

shlwapi

SHCreateStreamOnFileW
PathCombineW
PathFindExtensionW
PathFindFileNameW

kernel32

EncodePointer
SetEndOfFile
GetFileType
GetFullPathNameW
GetCurrentProcess
SetErrorMode
CloseHandle
GetSystemInfo
GetTickCount
UnmapViewOfFile
GetCommandLineW
OutputDebugStringW
SetDllDirectoryW
SetPriorityClass
SetConsoleCtrlHandler
GetConsoleTitleW
SetConsoleTitleW
GetConsoleWindow
FlushFileBuffers
WriteConsoleW
ReadConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetEnvironmentVariableW
SetEnvironmentVariableA
GetStdHandle
GetOEMCP
IsValidCodePage
GetProcessHeap
HeapSize
GetModuleHandleExW
GetLastError
GetFileAttributesExW
GetFileInformationByHandle
WriteFile
ReadFile
SetFilePointerEx
CreateFileW
LocalFree
GetCurrentProcessId
GetFileSize
FormatMessageW
MapViewOfFile
CreateFileMappingW
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedIncrement
InterlockedCompareExchange
GetModuleFileNameW
GetACP
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
CreatePipe
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
GetStringTypeW
HeapFree
RaiseException
RtlUnwind
GetCPInfo
SetStdHandle
HeapReAlloc
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
ExitProcess

user32

IsWindowVisible

shell32

SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoUninitialize
CreateStreamOnHGlobal
OleRun
CoCreateInstance
CoInitialize

winmm

waveOutGetErrorTextW
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen

oleaut32

VariantInit

Sections

.text
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe9aefb2b11dd3cdd2b2a3e6b738e653

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

shell32

ole32

winmm

oleaut32

Sections

.text Size: 984KB - Virtual size: 984KB

.rdata Size: 257KB - Virtual size: 256KB

.data Size: 62KB - Virtual size: 73KB

.rsrc Size: 1024B - Virtual size: 640B

.reloc Size: 68KB - Virtual size: 67KB

.text
Size: 984KB - Virtual size: 984KB

.rdata
Size: 257KB - Virtual size: 256KB

.data
Size: 62KB - Virtual size: 73KB

.rsrc
Size: 1024B - Virtual size: 640B

.reloc
Size: 68KB - Virtual size: 67KB