db2dfd2c27611ae1c93c3e61bfbd6ea4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db2dfd2c27611ae1c93c3e61bfbd6ea4_JaffaCakes118
Size

532KB
MD5

db2dfd2c27611ae1c93c3e61bfbd6ea4
SHA1

662d4a5826c06057930d40453d99789b806fb402
SHA256

ca1df843fdf2862c62a87f0995fcd960381c8850bfe49822311541ad1015ef14
SHA512

efce0b52298f189052ec0e4561a4cbaa1c74b85d34c0aa99a35cd5ae1cd96f62200566d751cd130fc84ac2e126eb1301b438a13f89025e83663806eed7fcb179
SSDEEP

12288:hJRorcsXIf4OjnV8JZ6vVM4sK59ceN7/tR+Yc:ujXIwOjnV86tM4D51N7tIYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db2dfd2c27611ae1c93c3e61bfbd6ea4_JaffaCakes118

Files

db2dfd2c27611ae1c93c3e61bfbd6ea4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4a38d657dc9f1ba1e6c5df06b1ae8ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\ZTCEMUOE\OJAZEUBDED\QKEU\

Imports

kernel32

GetCommandLineA
GlobalFindAtomA
FindFirstFileExA
GetThreadSelectorEntry
SetLastError
GetWindowsDirectoryW
InterlockedDecrement
LocalCompact
GetCPInfo
GetStdHandle
LCMapStringW
GetLongPathNameA
GetCurrentThreadId
FileTimeToDosDateTime
GetDiskFreeSpaceA
GetSystemDefaultLangID
GetProcAddress
SetUnhandledExceptionFilter
TransmitCommChar
TlsAlloc
SetVolumeLabelW
SetLocaleInfoW
WideCharToMultiByte
SetEnvironmentVariableA
GetLocaleInfoW
SetLocalTime
GetStringTypeW
HeapCreate
SetStdHandle
GlobalAddAtomA
SetHandleCount
TlsFree
DosDateTimeToFileTime
CreateEventW
TlsGetValue
WaitForDebugEvent
WriteFile
HeapDestroy
CreateNamedPipeW
GetCurrentThread
GetModuleFileNameW
GetLogicalDriveStringsA
CreateMutexA
ReadConsoleOutputCharacterA
LocalFlags
GetVolumeInformationW
GetStartupInfoW
lstrcpyA
HeapFree
GetPrivateProfileIntA
RtlUnwind
LocalFree
GetPriorityClass
GetTimeZoneInformation
MultiByteToWideChar
LoadLibraryW
VirtualFree
FindAtomA
LoadLibraryA
GetSystemTimeAsFileTime
GetCommandLineW
DuplicateHandle
GetNumberFormatA
CompareStringA
LeaveCriticalSection
WritePrivateProfileSectionA
GetUserDefaultLCID
GetDiskFreeSpaceExA
GetCurrentProcess
MoveFileExA
TerminateProcess
SetConsoleCtrlHandler
InterlockedExchange
InterlockedIncrement
SetFilePointer
GetVersionExW
EnterCriticalSection
ContinueDebugEvent
GetLastError
HeapAlloc
CommConfigDialogA
SetConsoleCursorInfo
GetSystemDefaultLCID
CreateProcessW
GetStringTypeA
GetCurrentProcessId
lstrcpy
GetProfileSectionW
VirtualQuery
GetLocalTime
LoadLibraryExA
SetEnvironmentVariableW
GetVersion
GetPrivateProfileSectionW
InitializeCriticalSection
GetModuleFileNameA
GetVolumeInformationA
QueryPerformanceCounter
GlobalFree
DebugActiveProcess
EnumResourceNamesA
GetTickCount
FreeEnvironmentStringsA
GlobalAlloc
TlsSetValue
RtlZeroMemory
GetModuleHandleA
DeleteCriticalSection
GlobalLock
ReadFile
IsBadWritePtr
FlushFileBuffers
GetWindowsDirectoryA
SetConsoleCP
DeleteFileW
CloseHandle
LCMapStringA
lstrlenA
GetEnvironmentStrings
GetExitCodeThread
GetSystemTime
FreeEnvironmentStringsW
GetFileType
SetPriorityClass
GetStartupInfoA
CompareStringW
OpenMutexA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
GetProfileStringW
UnhandledExceptionFilter
GetEnvironmentStringsW
OpenMutexW
CreateMailslotW
SetCurrentDirectoryA
ExpandEnvironmentStringsA
HeapReAlloc
VirtualLock
WriteConsoleInputW
ExitProcess
EnumCalendarInfoExA

user32

RemoveMenu
DefDlgProcW
DdeSetQualityOfService
CreateAcceleratorTableA
SetThreadDesktop
DdeReconnect
MonitorFromPoint
DestroyMenu
EnumDisplaySettingsA
CreateWindowExA
CopyImage
SetWindowRgn
MessageBoxA
CharPrevExA
GetMonitorInfoA
TileWindows
EnumDisplaySettingsW
RegisterClassA
ChildWindowFromPointEx
GrayStringA
RealGetWindowClass
FreeDDElParam
EnumDisplayDevicesW
RegisterClassExA
InvertRect
SetDlgItemInt
CallMsgFilterA
GetFocus
GetMenuBarInfo
ValidateRect
LoadBitmapA
DestroyWindow
ChangeMenuA
DefWindowProcA
LoadStringA
UnregisterClassW
GetMenuItemCount
CopyAcceleratorTableW
InvalidateRect
ChangeDisplaySettingsW
ReleaseDC
DdeCmpStringHandles
CopyIcon
DdeAccessData
InvalidateRgn
EnumDesktopWindows
SetClassLongA
GetClassLongA
CallWindowProcA
GetKeyboardLayoutNameA
FindWindowExW
RegisterClipboardFormatA
DialogBoxParamA
SetCapture
SetCursorPos
InternalGetWindowText
CreateDialogParamW
DdeSetUserHandle
FlashWindow
ArrangeIconicWindows
GetWindowContextHelpId
GetClassLongW
AppendMenuW
LoadMenuIndirectA
SwitchDesktop
ShowWindow
TabbedTextOutA
GetForegroundWindow
SetForegroundWindow
SendMessageTimeoutW
DrawFrameControl

comctl32

CreatePropertySheetPage
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_GetImageCount
InitCommonControlsEx

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4a38d657dc9f1ba1e6c5df06b1ae8ac

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 252KB - Virtual size: 251KB

.data Size: 108KB - Virtual size: 111KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 252KB - Virtual size: 251KB

.data
Size: 108KB - Virtual size: 111KB

.rsrc
Size: 28KB - Virtual size: 24KB