JaffaCakes118_451d380bb89f747dfcb24e342766037643e38f0dfea566099f2361af51a555ad

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_451d380bb89f747dfcb24e342766037643e38f0dfea566099f2361af51a555ad
Size

660KB
MD5

3600024eb5e95648763ba13190cf4a60
SHA1

ab26a0e15f835831eda02e7ba9967bf3f83e4e23
SHA256

451d380bb89f747dfcb24e342766037643e38f0dfea566099f2361af51a555ad
SHA512

2bc52aab1f384639ebcc26decf08e6e478b4c412ac9196e0ad1145c44b52133b18b2b44b2a6c7efef86d99cb898a0ad4a385e56c4b541970683bdb077fa7acd1
SSDEEP

12288:PgGBIVTYhF3ms3TJgJb0w3nxZJaQT5yeFxIFKPfyVnuKawUqyzd+EpVIQk:nwTQF3msjK3ncy5umfqu4S8EpQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bd1789026d6010f1849075e14a07f168349ac7e9bbe154358a0e96f0435e8d9a

Files

JaffaCakes118_451d380bb89f747dfcb24e342766037643e38f0dfea566099f2361af51a555ad
.zip
bd1789026d6010f1849075e14a07f168349ac7e9bbe154358a0e96f0435e8d9a
.exe windows:5 windows x86 arch:x86

159a2e4ccc84f2a04642d12fcf53e4a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\boxujisegomaya29\reserazewu47\yagabihi75\tawadisibi-tuzat.pdb

Imports

kernel32

GetConsoleAliasesA
GetConsoleTitleA
GlobalAlloc
LoadLibraryW
GetProcessHandleCount
InterlockedPopEntrySList
LeaveCriticalSection
WriteConsoleW
GetMailslotInfo
GetModuleFileNameW
GetVolumePathNameA
GetShortPathNameA
GetStdHandle
FillConsoleOutputCharacterW
GetLongPathNameW
SetLastError
LocalFlags
SetCalendarInfoW
MoveFileA
WriteProfileSectionW
SetConsoleWindowInfo
GetConsoleTitleW
VirtualProtect
GetFileAttributesExW
GetCPInfoExA
GetFileInformationByHandle
CreateFileW
HeapSize
WriteConsoleOutputCharacterA
GetConsoleAliasesLengthW
LoadLibraryA
FreeResource
FlushFileBuffers
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RaiseException
RtlUnwind
SetStdHandle
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapReAlloc
CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

IsTokenRestricted
ClearEventLogA

ole32

OleInitialize

Sections

.text
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

159a2e4ccc84f2a04642d12fcf53e4a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 705KB - Virtual size: 704KB

.data Size: 25KB - Virtual size: 289KB

.rsrc Size: 54KB - Virtual size: 53KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 705KB - Virtual size: 704KB

.data
Size: 25KB - Virtual size: 289KB

.rsrc
Size: 54KB - Virtual size: 53KB

.reloc
Size: 8KB - Virtual size: 7KB