f0e2f14ebb1413838bcbf3867cbf869c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f0e2f14ebb1413838bcbf3867cbf869c_JaffaCakes118
Size

120KB
MD5

f0e2f14ebb1413838bcbf3867cbf869c
SHA1

67d89a1ef848702df53554650592b630d77d8af7
SHA256

dbe25865352233d914e3446bfed1b6058600ea7aa17ab70ee6a56099c2fe0c93
SHA512

2dae7e5e21b25ceb85ea592f5f78a8d99a2db5e5738d5ffd02701af13003e8398ab1c2f9043896132e8879d652aad0f345021cca8e5bdf65a914c4bb765b99c0
SSDEEP

3072:fPY+GjGMb6lF4ibnwTXw8zyIKll8naEBQ:fPVMWhnwTg8zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0e2f14ebb1413838bcbf3867cbf869c_JaffaCakes118

Files

f0e2f14ebb1413838bcbf3867cbf869c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

454ea035e37695d9830b1bf53583ad9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
GetFileSize
CreateFileW
DeleteFileW
WriteFile
ExpandEnvironmentStringsW
LoadLibraryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
GetEnvironmentVariableW
TerminateProcess
lstrcatW
lstrcpynW
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
WaitForSingleObject
GetSystemInfo
GetVolumeInformationW
GetCommandLineW
CreateEventW
OpenEventW
SetEvent
CloseHandle
GetModuleFileNameW
GetLastError
Sleep
LocalAlloc
GetACP
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LocalFree
lstrlenW
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcessId
GetFileAttributesW
LCMapStringW
LCMapStringA
HeapSize
GetCurrentProcess
HeapReAlloc
HeapAlloc
RaiseException
HeapFree
ExitProcess
GetVersion
GetCommandLineA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA

user32

wsprintfW

advapi32

RegCreateKeyW
RegQueryValueExW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
DeleteService
CreateServiceW
ChangeServiceConfig2W
StartServiceW
StartServiceCtrlDispatcherW
RegOpenKeyExW
RegisterServiceCtrlHandlerExW
SetServiceStatus
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService
QueryServiceStatus
RegDeleteValueW
RegSetValueExW
RegCloseKey

shell32

ShellExecuteW

shlwapi

UrlGetPartW
StrStrIW

dnsapi

DnsFree

wininet

InternetQueryOptionW
HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetOpenW
HttpQueryInfoW
InternetReadFile
InternetCrackUrlW
InternetCloseHandle
InternetSetOptionW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

urlmon

URLDownloadToFileW

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

454ea035e37695d9830b1bf53583ad9c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

dnsapi

wininet

version

urlmon

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 856B

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 856B