JaffaCakes118_4a09cb21ae745c0084f4548ef3b2eef0

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_4a09cb21ae745c0084f4548ef3b2eef0
Size

168KB
MD5

4a09cb21ae745c0084f4548ef3b2eef0
SHA1

ed12406f19c6ecddefa2dcbff828b863f40fe569
SHA256

c9885460f5d6054206913f89a1a0a3a2d68e8fc28b89c538fe4860411ddee3a3
SHA512

9b4f4181f33ba8eabf8791bdb1ed629686fa9357a84a871eac7e2d7ae487d2538b6509cc890fed40ef03a5f419bd520d8718bad379cd9159ac7905449fa36482
SSDEEP

3072:nnFYj3z8TAAclUAYVlye7mQcZrUbRtjymBjdr05OWkBA13tECso:uDzUAAZAt6sUnjH087I3tz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4a09cb21ae745c0084f4548ef3b2eef0

Files

JaffaCakes118_4a09cb21ae745c0084f4548ef3b2eef0
.exe windows:4 windows x86 arch:x86

b47b18af1d5006baea7ba4b7a7e55b8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_vgp\Plugins\Updater\acroaum\win\Release\acroaum.pdb

Imports

psapi

EnumProcessModules
GetModuleFileNameExA

kernel32

CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetSystemTimeAsFileTime
GetLastError
CreateProcessA
DeleteFileA
CreateFileA
CreateDirectoryA
GetProcAddress
LoadLibraryA
Process32Next
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
GetModuleHandleA
GetLocaleInfoA
VirtualProtect
HeapAlloc
IsBadCodePtr
IsBadReadPtr
VirtualQuery
InterlockedExchange
ExitProcess
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
GetSystemInfo
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA

user32

SetDlgItemTextA
SetWindowTextA
DialogBoxParamA
SetWindowPos
EndDialog
FindWindowA
EnumWindows
GetWindowTextA
LoadStringA
SendMessageA
SetForegroundWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b47b18af1d5006baea7ba4b7a7e55b8a

Headers

File Characteristics

PDB Paths

Imports

psapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 108KB - Virtual size: 108KB