2ec666f56e943d37c45c1df89a625947_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2ec666f56e943d37c45c1df89a625947_JaffaCakes118
Size

8.6MB
MD5

2ec666f56e943d37c45c1df89a625947
SHA1

665d1f8a8b397b19680ccecf76f6098f0cd99b57
SHA256

f3b58682becaf5b0f621ec968be792da20edb4ee7b4909d7eba0e2a9f1ab26f9
SHA512

cb45040978aff8d95fa8ba7400aea2248207d1b6476adaaaffcb343009c5c8c5a2ee733ce038419ae58656b1662f6fcb38443e938c49e2db35606951f7e55eeb
SSDEEP

196608:vNHx1wd7WbdtDlcqjtdpTQ/Tl+7e0knE2QJliT9jN2S7+qc0q:FHx1S7MtDVtMLl/0kn9YQTJQr0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3޸_2012v2.6ʽ.exe

Files

2ec666f56e943d37c45c1df89a625947_JaffaCakes118
.zip
ศ.url
.url
3޸_2012v2.6ʽ.exe
.exe windows:4 windows x86 arch:x86

ff160957d16df3dba33bb98b0c70170a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\haozip\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb

Imports

comctl32

InitCommonControlsEx

shell32

SHBrowseForFolderW
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc

kernel32

FlushFileBuffers
CreateFileA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
WaitForSingleObject
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetCommandLineW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
ResumeThread
WaitForMultipleObjects
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
SetFileAttributesW
GetTempFileNameW
GetLongPathNameW
MoveFileW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetACP
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA

user32

DispatchMessageW
IsDialogMessageW
CreateDialogParamW
LoadIconW
SetTimer
TranslateMessage
ScreenToClient
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
EnableWindow
GetActiveWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
PostQuitMessage

gdi32

DeleteObject
CreateSolidBrush

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff160957d16df3dba33bb98b0c70170a

Headers

File Characteristics

PDB Paths

Imports

comctl32

shell32

kernel32

user32

gdi32

ole32

Sections

.text Size: 270KB - Virtual size: 269KB

.rdata Size: 67KB - Virtual size: 66KB

.data Size: 16KB - Virtual size: 40KB

.rsrc Size: 78KB - Virtual size: 77KB

.text
Size: 270KB - Virtual size: 269KB

.rdata
Size: 67KB - Virtual size: 66KB

.data
Size: 16KB - Virtual size: 40KB

.rsrc
Size: 78KB - Virtual size: 77KB