fb350b8ac97d03d49f5e3168f0d9bfe4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb350b8ac97d03d49f5e3168f0d9bfe4_JaffaCakes118
Size

400KB
MD5

fb350b8ac97d03d49f5e3168f0d9bfe4
SHA1

0c3cf862203b3d89975e2dd0bacd609181a5985e
SHA256

6a9a404145713dcfb24b4cabcd5658a70f7d3a4e11079780b9d79c5da62a0e74
SHA512

4e78c490ed29a944accbc89f2ed208f7363b163bf3584567133074dd5f036979b5842b2b258d7fbdda411c478ebebe9e6a959b1276f55f907d27d968bfeb2ae4
SSDEEP

6144:ZS6NrqHghUFGcn86PLPro9xCMbL1GwBMRXpqzX8QAQEpm:s6VhV6ACWZGpXyX8Qgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb350b8ac97d03d49f5e3168f0d9bfe4_JaffaCakes118

Files

fb350b8ac97d03d49f5e3168f0d9bfe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c6e65adb309b177f7480f79f074d8f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetQueryOptionA
InternetCrackUrlA
InternetCrackUrlW

ws2_32

connect
getservbyname
getservbyport
inet_ntoa
recv
gethostbyname
WSAStartup
gethostbyaddr
socket
send
inet_addr
htonl
ntohs
WSAAsyncSelect
shutdown
closesocket
htons
WSASetLastError
WSAGetLastError

winmm

timeEndPeriod
timeBeginPeriod

comctl32

InitCommonControlsEx

kernel32

LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
RtlUnwind
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
GetStdHandle
GetTimeZoneInformation
GetFullPathNameA
MulDiv
TerminateProcess
GetCurrentProcess
RaiseException
InterlockedDecrement
GetModuleFileNameA
GetProcAddress
EnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCurrentThread
CloseHandle
FreeLibrary
LoadLibraryA
OpenThread
InitializeCriticalSection
SetThreadPriority
SuspendThread
InterlockedIncrement
CreateFileMappingA
GetSystemTimeAsFileTime
FindFirstFileA
WriteFile
FindNextFileA
GetFileSize
GetLastError
FindClose
MapViewOfFile
UnmapViewOfFile
Sleep
LeaveCriticalSection
SetFilePointer
SetEndOfFile
ReadFile
GetTickCount
TlsSetValue
TlsFree
TlsAlloc
TlsGetValue
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
SetCurrentDirectoryA
CreateDirectoryW
CopyFileW
GetCurrentDirectoryW
FreeEnvironmentStringsA
SetLastError
CreateFileA
GetFileAttributesA
MoveFileW
GetCurrentDirectoryA
CopyFileA
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
SetFileAttributesA
CreateProcessA
GetPrivateProfileStringW
GetVersionExA
GetWindowsDirectoryA
CreateFileW
DeleteFileW
WritePrivateProfileStringA
WritePrivateProfileStringW
MoveFileA
SetFileAttributesW
SetCurrentDirectoryW
DeleteFileA
TerminateThread
CreateDirectoryA
GetModuleHandleA
FormatMessageA
FormatMessageW
ExitProcess
GetCommandLineW
WinExec
WaitForSingleObject
GetVersion
GetCurrentProcessId
GetTempPathA
LocalFree
LocalAlloc
GetShortPathNameA
OpenProcess
GetStartupInfoA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ResumeThread
ExitThread
HeapReAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetCommandLineA
GetProcessHeap
IsDebuggerPresent
HeapDestroy
HeapCreate
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetLocaleInfoA
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA

user32

AdjustWindowRectEx
SendMessageA
CreateWindowExW
RegisterClassA
MessageBoxA
SetCursor
ShowWindow
SetWindowPos
LoadIconA
GetDesktopWindow
GetDC
GetKeyState
AdjustWindowRect
EnableWindow
UpdateWindow
ReleaseDC
SetWindowTextA
UnregisterClassA
GetWindowLongA
LoadCursorA
SetWindowTextW
GetClientRect
CreateWindowExA
GetClassNameW
SetClassLongA
GetMessagePos
GetClassNameA
ScreenToClient
GetWindowRect
RegisterClassExA
RegisterClassExW
MessageBoxW
DefWindowProcW
PostMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
DestroyWindow
DefWindowProcA
SetWindowLongA
EnumThreadWindows

gdi32

SetTextColor
SelectObject
GetStockObject
CreateFontA
SetBkColor
GetTextExtentPoint32W

advapi32

RegDeleteKeyA
GetUserNameA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyA

ole32

CoCreateInstance
OleInitialize

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c6e65adb309b177f7480f79f074d8f7

Headers

File Characteristics

Imports

wininet

ws2_32

winmm

comctl32

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 268KB - Virtual size: 267KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 16KB - Virtual size: 22KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 16KB - Virtual size: 22KB

.rsrc
Size: 24KB - Virtual size: 20KB