JaffaCakes118_6334b405e72a42de148b3bd452a4c141bd03957f4c287a3a0677a81638f104fa

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_6334b405e72a42de148b3bd452a4c141bd03957f4c287a3a0677a81638f104fa
Size

719.3MB
MD5

010a0142496780612b741140f6ed6f2a
SHA1

02f5a56dbf6b68d3fc71ef6b54fc030d594af193
SHA256

6334b405e72a42de148b3bd452a4c141bd03957f4c287a3a0677a81638f104fa
SHA512

010a336daa67c6575dac50a8c10982ab1d67191af930e77d78ab37435e6b820138d009c5800abfa8e5bd633caafb7c76bfdc2f9de7c04d8bbbc2f81e190472ba
SSDEEP

98304:nn2KJq9I3O5H07P8FYD5Fxse9XMC0lrvpKYU:n2+N3KHFF221jU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6334b405e72a42de148b3bd452a4c141bd03957f4c287a3a0677a81638f104fa

Files

JaffaCakes118_6334b405e72a42de148b3bd452a4c141bd03957f4c287a3a0677a81638f104fa
.exe windows:6 windows x86 arch:x86

0e66f62b49663fa49d7bd2afdb84e7b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
FindFirstFileW
GetDriveTypeW
GetFileAttributesW
GetFullPathNameW
SetFileAttributesA
SetFileAttributesW
SetUnhandledExceptionFilter
ConnectNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
LeaveCriticalSection
ReleaseSemaphore
ReleaseMutex
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsFree
FlushInstructionCache
GetSystemInfo
GetLocalTime
GetTickCount
GetSystemDirectoryA
GetWindowsDirectoryW
VirtualProtect
CreateFileMappingW
FindResourceExW
GetModuleHandleA
GetModuleHandleW
LoadResource
FindResourceW
LoadLibraryA
LoadLibraryW
GlobalAlloc
LocalAlloc
MulDiv
lstrcmpA
lstrlenA
lstrlenW
FindResourceA
WriteProfileStringW
GetComputerNameW
SystemTimeToFileTime
GetConsoleOutputCP
CreateFileW
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
FlushFileBuffers
CloseHandle
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapAlloc
HeapFree
WriteFile
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
FreeLibrary
SetEndOfFile
TlsSetValue
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RtlUnwind
RaiseException
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
CreateFileA
CreateDirectoryW
CompareFileTime
ExpandEnvironmentStringsW
SetStdHandle
GetStdHandle
VirtualAllocEx
VirtualAlloc
GetTickCount64
CreateThread
GetModuleFileNameA
WaitForSingleObject
GetWindowsDirectoryA
FindNextFileA
ExitProcess
FindFirstFileA
WriteConsoleW
GetCommandLineW
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
LCMapStringEx
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer

user32

GetDC
SystemParametersInfoW
SetWindowsHookExW
GetWindow
GetDesktopWindow
EqualRect
IntersectRect
GetSysColor
ChildWindowFromPoint
MapWindowPoints
ScreenToClient
MessageBoxExW
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
RedrawWindow
SetForegroundWindow
SetActiveWindow
TrackPopupMenu
GetMenuItemID
CheckMenuItem
CreatePopupMenu
CreateMenu
GetMenuStringW
SetMenu
LoadMenuW
GetSystemMetrics
SetCapture
GetAsyncKeyState
GetKeyState
GetFocus
GetActiveWindow
CharUpperW
RegisterClipboardFormatW
GetDialogBaseUnits
GetDlgCtrlID
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
DeferWindowPos
BeginDeferWindowPos
UnregisterClassW
SendMessageTimeoutW
RegisterWindowMessageW
LoadIconA
GetCursor

gdi32

SetWindowOrgEx
ExtCreatePen
GetStockObject
ExtEscape
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateFontIndirectW
CreateDCW
GetEnhMetaFileW

comdlg32

PrintDlgExW
PageSetupDlgW

advapi32

RegCloseKey
RegNotifyChangeKeyValue

shell32

CommandLineToArgvW

ole32

OleInitialize
CoCreateGuid
CoGetClassObject

shlwapi

PathAppendA
StrToIntA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

e
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

3
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

s
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e66f62b49663fa49d7bd2afdb84e7b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 136KB - Virtual size: 136KB

e Size: 11KB - Virtual size: 11KB

f Size: - Virtual size: 496B

.data Size: 3.1MB - Virtual size: 3.1MB

.idata Size: 5KB - Virtual size: 5KB

3 Size: 512B - Virtual size: 1B

s Size: 512B - Virtual size: 72B

.rsrc Size: 351KB - Virtual size: 351KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 136KB - Virtual size: 136KB

e
Size: 11KB - Virtual size: 11KB

f
Size: - Virtual size: 496B

.data
Size: 3.1MB - Virtual size: 3.1MB

.idata
Size: 5KB - Virtual size: 5KB

3
Size: 512B - Virtual size: 1B

s
Size: 512B - Virtual size: 72B

.rsrc
Size: 351KB - Virtual size: 351KB

.reloc
Size: 8KB - Virtual size: 7KB