f7b52d9f2815ede841ce64ab9ccc0141_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f7b52d9f2815ede841ce64ab9ccc0141_JaffaCakes118
Size

543KB
MD5

f7b52d9f2815ede841ce64ab9ccc0141
SHA1

814af1c2f7766fd966150d5e753f967dcb209f8b
SHA256

69e28d95dcf605e5bcdcf5908b111fdbd28afae2ce86195beff5caf4f576d815
SHA512

d9611a73dac25c5b18638432ba66b80f24b827d6ebe1cc02338148cf72c860566f29ffe2ac37c232ec53ea131bb8322c1c08543be22a58208859b53ff75a66c1
SSDEEP

12288:MpxAIfY5e+i8uWWpOdjjL1VEFb5zrJrjlD:Lb5e+i5VEdz0Zrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7b52d9f2815ede841ce64ab9ccc0141_JaffaCakes118

Files

f7b52d9f2815ede841ce64ab9ccc0141_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a538f303c7ea6f61150fa1a75793f8f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
FindTextW

comctl32

InitCommonControlsEx

user32

GetMenuItemInfoA
RegisterClassExA
GetClientRect
ShowOwnedPopups
RegisterClassA
SetDlgItemInt
GetMonitorInfoW
OemToCharA
GetClipboardFormatNameA
SetScrollInfo
MapDialogRect
UnregisterClassA

kernel32

GetDateFormatA
GetTimeFormatA
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
IsValidCodePage
SetUnhandledExceptionFilter
GetStartupInfoW
MultiByteToWideChar
HeapReAlloc
SetStdHandle
GetFileType
GetCommandLineA
LeaveCriticalSection
WriteFile
VirtualQuery
WideCharToMultiByte
GetCurrentThreadId
SetLastError
CompareStringW
HeapFree
GetSystemTimeAsFileTime
FreeLibrary
TlsAlloc
WriteConsoleA
GetStdHandle
OpenMutexA
FreeEnvironmentStringsW
GetModuleHandleW
SetConsoleCtrlHandler
GetCPInfo
QueryPerformanceCounter
VirtualAlloc
TerminateProcess
HeapDestroy
TlsFree
Sleep
GetLocaleInfoW
CompareStringA
InterlockedDecrement
GetTimeZoneInformation
CloseHandle
GetCommandLineW
SetEnvironmentVariableA
LoadLibraryA
GetEnvironmentStringsW
GetCurrentThread
FlushFileBuffers
GetStringTypeA
GetStartupInfoA
ReadFile
EnumSystemLocalesA
TlsGetValue
GetConsoleOutputCP
SetFilePointer
GetModuleFileNameW
ExitProcess
VirtualFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
HeapAlloc
LCMapStringW
CreateFileA
GetCurrentProcess
DeleteCriticalSection
DeleteFileW
UnhandledExceptionFilter
WriteConsoleW
GetConsoleMode
LCMapStringA
HeapSize
GetThreadContext
GetUserDefaultLCID
InterlockedExchange
GetTickCount
InterlockedIncrement
GetStringTypeW
IsValidLocale
IsDebuggerPresent
CreateMutexA
TlsSetValue
GetCurrentProcessId
SetHandleCount
RtlUnwind
GetLastError
GetACP
GetModuleFileNameA
GetProcAddress
HeapCreate
GetConsoleCP

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a538f303c7ea6f61150fa1a75793f8f2

Headers

File Characteristics

Imports

comdlg32

comctl32

user32

kernel32

Sections

.text Size: 215KB - Virtual size: 214KB

.rdata Size: 9KB - Virtual size: 26KB

.data Size: 316KB - Virtual size: 316KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 215KB - Virtual size: 214KB

.rdata
Size: 9KB - Virtual size: 26KB

.data
Size: 316KB - Virtual size: 316KB

.rsrc
Size: 1KB - Virtual size: 1KB