460e17dc70f5a7432bec340bfbc97de9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

460e17dc70f5a7432bec340bfbc97de9_JaffaCakes118
Size

82KB
MD5

460e17dc70f5a7432bec340bfbc97de9
SHA1

3ddec6163cd88b8d3f42df7ab28cd0ab520d25d1
SHA256

19a60b80322d7b9b2e4c6cbb5e593046762a5b5511af66d398f08c65f4e0ca23
SHA512

fcf836a17c723e489740d8bb396ba14b05eaaf6d3e98abaea8afe173d9294ab4e26955aef89e9b56822fcb0bc9e02ec60397d8aa29eff9a9d331a072acbbb8e4
SSDEEP

768:D3CmWK29pwyjGbkkyMpGFrlvDPLpzpDCCErgEWGiXu0joU/rmhZQjvbreqQNXj7l:Dt2E4GvGFzlWCE8EWq0Kaej35aNVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460e17dc70f5a7432bec340bfbc97de9_JaffaCakes118

Files

460e17dc70f5a7432bec340bfbc97de9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

83568bf3e6ceaae1015c79b70d15f51e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\我的程序\Light\setup\Release\setup.pdb

Imports

kernel32

FindResourceExA
GetModuleFileNameA
FindFirstFileA
FindClose
GetEnvironmentVariableA
GetCurrentDirectoryA
GetTempPathA
WinExec
CopyFileA
Sleep
FindResourceA
ReadFile
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SizeofResource
LockResource
LoadResource
WideCharToMultiByte
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineA
GetStartupInfoA
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
RtlUnwind
WriteFile
GetConsoleCP
GetConsoleMode
CloseHandle
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CreateFileA
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetStdHandle
FlushFileBuffers

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA

urlmon

URLDownloadToFileA

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83568bf3e6ceaae1015c79b70d15f51e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

urlmon

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 6KB - Virtual size: 5KB