d4fa1841782ca433feb8b2e1782f1c73_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d4fa1841782ca433feb8b2e1782f1c73_JaffaCakes118
Size

428KB
MD5

d4fa1841782ca433feb8b2e1782f1c73
SHA1

0da04e095d4dab0b4ec636f82d5fbf0467082526
SHA256

053198a79de5a4598268825ffdd97232ee6055cb8ca2edf39ef9898436fb3c38
SHA512

477167dfd363dee5bff9e39d29c4b63f075bd57713287132326bf0de06b96e77e5f113aaaec83d1e5ae258b765719257cbf106604cacb2d629644af7dd000d42
SSDEEP

6144:8yrZ36ULKapPQ/Eg+7GjkKKceOI7zkuT2DnXOsKbXZpWsM4x3s:XN360lpPQN+qjkK5eOGzkfOu4ds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4fa1841782ca433feb8b2e1782f1c73_JaffaCakes118

Files

d4fa1841782ca433feb8b2e1782f1c73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a019e4eea263651ac64eec80fde3a9e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\_Program\cuter\_accessory\exebindtool\花开_installexe\release\exe分发运行母鸡花开专用版.pdb

Imports

kernel32

TerminateProcess
FileTimeToSystemTime
GetLastError
SetLastError
LocalFree
FreeLibrary
lstrlenW
GetProcAddress
LoadLibraryA
GetCurrentProcessId
ExitProcess
GetModuleHandleA
GetTempPathA
GetFileAttributesA
SetFileAttributesA
SetPriorityClass
HeapAlloc
HeapFree
GetTickCount
GetCurrentThread
GetProcessHeap
GetCommandLineA
SetProcessPriorityBoost
lstrcatA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetModuleFileNameA
GetVersionExA
lstrcpyA
FindResourceA
FreeResource
LoadResource
LockResource
LoadLibraryExA
GetVolumeInformationA
Process32First
Process32Next
CreateToolhelp32Snapshot
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
RtlUnwind
InitializeCriticalSection
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RaiseException
GetStdHandle
GetCurrentProcess
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
MultiByteToWideChar
GetSystemDirectoryA
InterlockedDecrement
WideCharToMultiByte
SizeofResource
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapReAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

wsprintfA

shell32

ShellExecuteExA
SHChangeNotify

ole32

CoCreateInstance
CoTaskMemFree
OleRun
CoInitialize

oleaut32

VariantClear

netapi32

Netbios

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a019e4eea263651ac64eec80fde3a9e0

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

ole32

oleaut32

netapi32

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 39KB

.rsrc Size: 332KB - Virtual size: 331KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 39KB

.rsrc
Size: 332KB - Virtual size: 331KB