JaffaCakes118_73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d
Size

203KB
MD5

011493747c636ab0c9d72b3c48636280
SHA1

08034a9ab3d3f9768f6ba86a10208817769650a6
SHA256

73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d
SHA512

0bff50d63c2d4ad4dc95fa03085b0a5a58de1726ed0ee06c9be0c02d4629b0c84d35f715d97f445833b8716ffb7996b71e00f4c4ba5d92bad5d8625adaaa9394
SSDEEP

6144:L+3NScBUqlgC8gmbwVj0OAMa5D1fAUQS6Kzz3xv:L+dScBUqlgCnow9sN5D1fAqv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5e5b371c5e0c637ae119d80c65425ddfd79db7e87e539b46db93ec916a988d0f

Files

JaffaCakes118_73bc6f6eaf2be80ea68a9208eb4d85ef99f0ea51d94878c2837f327d5ad8e43d
.zip
5e5b371c5e0c637ae119d80c65425ddfd79db7e87e539b46db93ec916a988d0f
.exe windows:5 windows x86 arch:x86

9c43d748430a466f3e14807bef867bde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\puvojocokexuw\23\helikumeveg\zihorisodu\fapedefiti\zupip.pdb

Imports

kernel32

SetWaitableTimer
WaitNamedPipeA
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesA
GetCPInfoExA
EnumResourceTypesW
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
DeleteFileA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
AddRefActCtx
GetConsoleAliasW
FindFirstChangeNotificationA
WritePrivateProfileStringW
EnumResourceNamesA
SearchPathW
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
GetComputerNameExW
FindNextFileW
SetPriorityClass
BuildCommDCBAndTimeoutsW
OpenJobObjectW
InitializeCriticalSection
FindResourceExW
SetConsoleMode
_lclose
SetCommMask
GetConsoleTitleW
CreateDirectoryExA
FoldStringA
HeapAlloc
HeapSize
LoadLibraryW
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
RtlUnwind
RaiseException
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW

user32

ClientToScreen
ScreenToClient

advapi32

BackupEventLogW
CloseEventLog
GetNumberOfEventLogRecords
GetEventLogInformation

winhttp

WinHttpReadData
WinHttpSetTimeouts

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 289KB - Virtual size: 39.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c43d748430a466f3e14807bef867bde

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

winhttp

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 289KB - Virtual size: 39.6MB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 289KB - Virtual size: 39.6MB

.rsrc
Size: 21KB - Virtual size: 21KB