e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118
Size

183KB
MD5

e836a0adf53ca83f190e8fae79ad1861
SHA1

3af8d274e9d011440c4618184418f33fd948e24f
SHA256

3a7a2543a4242fa18729f5d545bf7c7d26402e2841f223e28ebde4c6c25afa66
SHA512

838557867402bf5d9dcd2246909741200586670a93a06cef891ab4c6c7c37fdacefffe49206d0a15a151262ee935fb4ef9b2f436e1994649492a61b71c29a25f
SSDEEP

3072:JQsKAJNkpkWIj2E9Qjq6F9HTYoh8GNZTgZ0oQB/9Tp7xAgZX7i39hXMb0/DtI7sV:asKeGJI2EOqQTv8GN5mQ3p7t7ibXMwef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118

Files

e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2157ab46dac793b11132f6bfe1de5395

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetVersionExA
GetLastError
SetEvent
GetVersionExW
LoadLibraryExA
CreateEventW
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetTickCount
OpenMutexA
GetCurrentProcessId
CreateMutexW
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
WriteFile
CreateFileW
GetLocalTime
GetCurrentThreadId
ReleaseMutex
GetCurrentProcess
GetCommandLineW
FlushFileBuffers
CreateFileA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
Sleep
HeapSize
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualQuery

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

user32

MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
LoadStringA
LoadStringW
GetWindowRect
CreateDialogParamA
GetDesktopWindow
MessageBoxA
GetActiveWindow
wsprintfA
SetFocus
GetDlgItem
SetWindowLongA
LoadImageA
DialogBoxParamA
GetWindowLongA
SendDlgItemMessageA
EndDialog

gdi32

DeleteObject

ole32

CoFreeUnusedLibraries
CoQueryProxyBlanket
CoInitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2157ab46dac793b11132f6bfe1de5395

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

user32

gdi32

ole32

Sections

.text Size: 160KB - Virtual size: 160KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 326B

.text
Size: 160KB - Virtual size: 160KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 326B