f6177b7452fbc05af37b071bb6df6760_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6177b7452fbc05af37b071bb6df6760_JaffaCakes118
Size

56KB
MD5

f6177b7452fbc05af37b071bb6df6760
SHA1

24c7f4620c8c025b2855e311919fe59e78f511ea
SHA256

151b7d153ea1dae806e84b4c9dca9d7c8103f078fac72f3a8273aa7751d1aeea
SHA512

b30cb09c5acb9b58703f55516cdf9c2bae89f1f00c425d7b22b9252e9a03b59e325b755b6fc6511456f06c1fd3efcca12801820824d78ff904fecf3ae2ac7cc5
SSDEEP

768:yZ97c+8CeOex0X6uxs7roEwaVemxZSP07bcb80XedylcJg:CNECeOlavo7aVeUZLUXeEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6177b7452fbc05af37b071bb6df6760_JaffaCakes118

Files

f6177b7452fbc05af37b071bb6df6760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9d464385639592acf9cb31b3ab772ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
DeleteFileA
FindClose
FindNextFileA
GetLastError
CreateMutexA
lstrcmpiA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateFileA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
WriteFile
GlobalFree
LocalAlloc
CreateThread
GetLocalTime
lstrcatA
CreateDirectoryA
OpenProcess
CloseHandle
LoadLibraryA
CreateProcessA
GetVersionExA
GetProcAddress
GetComputerNameA
GetModuleFileNameA
lstrlenA
lstrcpyA
FindFirstFileA
Sleep
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
ReadFile

user32

GetWindowThreadProcessId
IsWindow
GetSystemMetrics
UpdateWindow
GetForegroundWindow
GetCursorPos
CharLowerA
TranslateMessage
GetMessageA
LoadImageA
RegisterClassExA
GetSysColorBrush
SetTimer
CreateWindowExA
wsprintfA
DispatchMessageA
GetWindowRect
GetWindowTextA
PostQuitMessage
CreatePopupMenu
AppendMenuA
SetForegroundWindow
TrackPopupMenu
PeekMessageA
DestroyMenu
DefWindowProcA

gdi32

GetObjectA
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
SetPixel
DeleteObject
DeleteDC
GetDIBits

advapi32

GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoInitialize

vic32

ord121
ord23
ord16
ord36
ord47
ord3
ord7

wininet

FtpSetCurrentDirectoryA
FtpCreateDirectoryA
FtpPutFileA
InternetCloseHandle
InternetOpenA
InternetConnectA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9d464385639592acf9cb31b3ab772ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

vic32

wininet

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB