f7cd909340f16455397149df998e7514_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f7cd909340f16455397149df998e7514_JaffaCakes118
Size

798KB
MD5

f7cd909340f16455397149df998e7514
SHA1

c24cd3601c21f94a917e8bdf4dad64e08325e5d2
SHA256

db7ff421c2a572232f057189eb64c644d62465061591d6fc8d2fc548b8d81bfc
SHA512

cac2a1a7ca2055addc766daa95b6444e1727333659422a6cc13636bfe9e2fbc9f4106cc8310cd43199d9979ca1db3bac647d8d4b98e8379d344c0189c5198875
SSDEEP

24576:2RQrPvEpn37esQIiVgHGobiAtyfJrmxXgXTvq510:2RQrnEZ37viVgHBi6y8xXgXTa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7cd909340f16455397149df998e7514_JaffaCakes118

Files

f7cd909340f16455397149df998e7514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbfd646191535e2b3dd60eb85e77dac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

wsock32

gethostbyaddr
WSAStartup
WSACleanup

wininet

InternetCanonicalizeUrlA
InternetGetCookieA
InternetReadFile
HttpAddRequestHeadersA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
InternetSetCookieA

iphlpapi

GetIpAddrTable

netapi32

Netbios

kernel32

HeapReAlloc
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
IsBadCodePtr
IsBadReadPtr
GetTickCount
QueryPerformanceCounter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetEnvironmentStringsW
HeapSize
GetProcessHeap
GetSystemTime
GetLastError
InterlockedExchange
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
MultiByteToWideChar
lstrlenA
CloseHandle
GetFileSize
CreateFileA
ReleaseMutex
WaitForSingleObject
SetFileAttributesA
MoveFileA
DeleteFileA
GetVolumeInformationA
CopyFileA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
Sleep
InterlockedIncrement
InterlockedDecrement
CreateEventA
GetCurrentThreadId
LocalFree
LocalAlloc
FormatMessageA
CreateThread
ExitProcess
ReadFile
GetModuleHandleA
SetEvent
SetWaitableTimer
CreateWaitableTimerA
GetTempPathA
SetUnhandledExceptionFilter
OpenMutexA
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
OutputDebugStringA
TerminateProcess
HeapFree
FindNextFileA
FindFirstFileA
WriteFile
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
ExpandEnvironmentStringsA
GlobalAlloc
WideCharToMultiByte
FindResourceExA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
CompareStringW
CompareStringA
InitializeCriticalSection
DeleteCriticalSection
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetOEMCP
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
SetFilePointer
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
LCMapStringW
LCMapStringA
GetCPInfo
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
HeapDestroy
FindClose
GetFullPathNameA
GetSystemTimeAsFileTime
GetTimeZoneInformation
VirtualProtect
GetDateFormatA
GetTimeFormatA
HeapAlloc

user32

wsprintfA
GetKeyboardLayoutNameA
ActivateKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutList
GetForegroundWindow
SetActiveWindow
GetFocus
GetActiveWindow
AttachThreadInput
LoadStringA
SetPropA
SetWindowPos
FindWindowExA
GetDlgItem
GetPropA
RemovePropA
GetMessageA
CreateWindowExA
SetWindowLongA
MsgWaitForMultipleObjects
DefWindowProcA
PeekMessageA
TranslateMessage
GetSystemMetrics
DispatchMessageA
GetWindowThreadProcessId

advapi32

RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA

shell32

ShellExecuteA

ole32

CoUnmarshalInterface
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoCreateInstance
CoMarshalInterface
CreateStreamOnHGlobal
OleRun
CoMarshalInterThreadInterfaceInStream

oleaut32

GetErrorInfo
SysFreeString
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VariantCopy
VariantInit
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbfd646191535e2b3dd60eb85e77dac4

Headers

File Characteristics

Imports

shfolder

wsock32

wininet

iphlpapi

netapi32

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 609KB - Virtual size: 608KB

.rdata Size: 71KB - Virtual size: 71KB

.data Size: 5KB - Virtual size: 20KB

.rsrc Size: 111KB - Virtual size: 112KB

.text
Size: 609KB - Virtual size: 608KB

.rdata
Size: 71KB - Virtual size: 71KB

.data
Size: 5KB - Virtual size: 20KB

.rsrc
Size: 111KB - Virtual size: 112KB