429b998c63b19fa56063f3c74c64929c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

429b998c63b19fa56063f3c74c64929c_JaffaCakes118
Size

1.9MB
MD5

429b998c63b19fa56063f3c74c64929c
SHA1

11dfef412ba5b439fcddfc46a8e2b1e76eb0d48c
SHA256

5bee62afab6e1c6421e215e8cb0c0145ce439a2132b82de4f69d3a4a9a5d78e8
SHA512

dd2be9de000f5014daecb91681761ec464cbfbe9d97b4e657e9ccc0ccdbc3df83a4cea20ba4afb1239cabe952347517c1c3f993bf9cd0095cfe1b5b3e64baa9d
SSDEEP

49152:i5p5q+3KhMUvqAKgyu3p95G7Q9LIjBaUnZoD:6zIZZ3JqED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429b998c63b19fa56063f3c74c64929c_JaffaCakes118

Files

429b998c63b19fa56063f3c74c64929c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1182b780cdcc14c150b354aa12dfb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject
SelectObject

kernel32

GetTickCount
GetCurrentThread
GetLastError
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetVersion
GetCommandLineA
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
CreateProcessW
FindResourceW
HeapCreate
WideCharToMultiByte
CreateProcessA
GetEnvironmentStrings
GetModuleHandleW
GetACP
CloseHandle
TlsFree
MapViewOfFile
RaiseException
GetCurrentDirectoryA
LockResource
SizeofResource
GetShortPathNameA
GlobalUnlock
GetThreadLocale
LCMapStringA
GlobalFree
SetStdHandle
InterlockedIncrement
TlsSetValue
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
FindFirstFileW
lstrcpyA
FindNextFileW
GlobalLock
GetWindowsDirectoryA
DeleteFileA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
SetEvent
SetHandleCount
EnterCriticalSection
WriteConsoleW
LeaveCriticalSection
GetLocaleInfoA
VirtualQuery
SetUnhandledExceptionFilter
TerminateProcess
MulDiv
CreateFileA
SetFileAttributesA
CreateThread
SetFilePointer
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
FormatMessageA
TlsGetValue
FindClose
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
SetErrorMode
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetStdHandle

user32

GetSysColor
MessageBoxA
SetForegroundWindow
GetSubMenu
ReleaseCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
GetWindowLongA
RegisterClassA
ShowWindow
GetParent
DestroyWindow
GetActiveWindow
ReleaseDC
GetDC
EndPaint
IsWindow
SetWindowPos
DestroyMenu

Sections

.text
Size: 1.9MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e1182b780cdcc14c150b354aa12dfb2

Headers

File Characteristics

Imports

gdi32

kernel32

user32

Sections

.text Size: 1.9MB - Virtual size: 2.2MB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 1.9MB - Virtual size: 2.2MB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 32KB - Virtual size: 31KB