173cef4a58790a474da42bd95312147c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

173cef4a58790a474da42bd95312147c_JaffaCakes118
Size

332KB
MD5

173cef4a58790a474da42bd95312147c
SHA1

c73984fdf5a608b84fa4cb79b4d3611e4777219a
SHA256

82f8ac2808f54ae40ae18766e69d2da9081aab691429923b177cb544fd00e85b
SHA512

b5b3fc6ca03b4b906b8f9a2dac7dfc426c95e6a4212331f9b9853b7d33e25c5efd610b978fc9113c67d8a3a2e7e2d648658f627c2467e1b90e096b2bcbfea1ee
SSDEEP

6144:ZF5PFGAOp1M6TejbeVbkmA7OGE4cT3dQTBfIOwNc:RPFGvLeWbMOb4kSBwq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173cef4a58790a474da42bd95312147c_JaffaCakes118

Files

173cef4a58790a474da42bd95312147c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd2800017ba2d74cca2f1572c8326f48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
TerminateThread
WaitForSingleObject
CreateThread
GetComputerNameA
GetProcessHeap
VirtualProtect
VirtualAlloc
ExitProcess
CloseHandle
GetTickCount
GlobalAlloc
GlobalFree
FlushFileBuffers
SetLastError
GetCommandLineA
HeapAlloc
GetStartupInfoA
Sleep
GetCurrentDirectoryA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetProcessVersion
ExitThread
GetACP
GetSystemInfo
GetCPInfo
GetLocaleInfoA
SetStdHandle
VirtualQuery
InterlockedExchange
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetOEMCP
IsBadCodePtr
IsBadReadPtr
WideCharToMultiByte
WriteFile
RtlUnwind
RaiseException
HeapFree
SetUnhandledExceptionFilter
VirtualFree
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
SetFilePointer
GetStdHandle

gdi32

TextOutA
SetTextColor
SetBkColor
GetCharWidthFloatA
GetTextExtentPoint32A
GetTextMetricsA

user32

SendMessageA
GetClientRect
PostQuitMessage
DefWindowProcA
wsprintfA
UnregisterHotKey
GetDC
ReleaseDC
ShowCaret
HideCaret
DestroyCaret
MessageBoxA
MessageBeep
SetCaretPos
GetKeyState
BeginPaint
DrawTextExA
EndPaint
GetSystemMetrics
GetDesktopWindow

winmm

timeBeginPeriod

winscard

SCardAccessStartedEvent

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EPK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B/7
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

B/A2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

B/A1
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

B/A4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vst
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B/A5
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd2800017ba2d74cca2f1572c8326f48

Headers

File Characteristics

Imports

kernel32

gdi32

user32

winmm

winscard

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 1.0MB

EPK Size: 4KB - Virtual size: 4KB

B/7 Size: 4KB - Virtual size: 4KB

B/A2 Size: 8KB - Virtual size: 8KB

B/A1 Size: 4KB - Virtual size: 768B

B/A4 Size: 4KB - Virtual size: 4KB

.vst Size: 4KB - Virtual size: 1024B

B/A5 Size: 192KB - Virtual size: 192KB

.rsrc Size: 4KB - Virtual size: 740B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 1.0MB

EPK
Size: 4KB - Virtual size: 4KB

B/7
Size: 4KB - Virtual size: 4KB

B/A2
Size: 8KB - Virtual size: 8KB

B/A1
Size: 4KB - Virtual size: 768B

B/A4
Size: 4KB - Virtual size: 4KB

.vst
Size: 4KB - Virtual size: 1024B

B/A5
Size: 192KB - Virtual size: 192KB

.rsrc
Size: 4KB - Virtual size: 740B

.reloc
Size: 8KB - Virtual size: 7KB