fc02d0179b34c738b85b94434274a864_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fc02d0179b34c738b85b94434274a864_JaffaCakes118
Size

297KB
MD5

fc02d0179b34c738b85b94434274a864
SHA1

d233ac537f99ba305632e5b33a42e4cb12825f50
SHA256

c1b78644cacc2a0021fdd58fae1c189315a28ebe0fb685cde931c0809c9d77fc
SHA512

5f738b5c52a135222cea8ab0c6cae08b7d96c81819539e31083f812aec2b0b39c2a354543addfdfc41b2c1034bbc765257034fdf749c50bc1efc8d76d700dd7e
SSDEEP

6144:kl7VzBdK/v+G0C+/1a7EGZzfV3hBQ45PfI95M7fUhaP+LRsA:M7VzBm+CgDQzd3PkM7wY+ls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc02d0179b34c738b85b94434274a864_JaffaCakes118

Files

fc02d0179b34c738b85b94434274a864_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c78c0c9c638faf05cb612bc4b12cff6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
CreateDialogIndirectParamA
TrackMouseEvent
DefDlgProcW
GetWindowTextLengthA
MapDialogRect
CharToOemW
ToAscii
RegisterClassA
CascadeWindows
GetDlgItemInt
GetKeyboardLayoutList
GetDesktopWindow
UnregisterHotKey
OpenWindowStationW

comctl32

InitCommonControlsEx

kernel32

VirtualAlloc
CloseHandle
IsBadWritePtr
SetFilePointer
VirtualProtect
QueryPerformanceCounter
TerminateProcess
GetVersionExA
GetCurrentThread
ReadConsoleW
CreateFileW
GetCommandLineA
FreeEnvironmentStringsW
OpenMutexA
TlsAlloc
LCMapStringA
GetStringTypeW
WideCharToMultiByte
VirtualQuery
CompareStringW
HeapFree
GetModuleHandleA
SetEnvironmentVariableA
GetEnvironmentStringsW
LCMapStringW
EnumSystemLocalesW
IsValidCodePage
GetCurrentProcess
FileTimeToSystemTime
GetCPInfo
SetHandleCount
GetACP
LoadLibraryA
GetEnvironmentStrings
SetStdHandle
GetStartupInfoA
GetOEMCP
OpenMutexW
HeapReAlloc
SetLastError
GetTempFileNameA
ExitProcess
GetUserDefaultLCID
HeapSize
GetLocaleInfoW
CompareStringA
DeleteCriticalSection
TlsFree
ReadFile
GetCurrentThreadId
InterlockedExchange
GetSystemDefaultLCID
GetStringTypeA
InitializeCriticalSection
FlushFileBuffers
TlsSetValue
GetProcAddress
RtlUnwind
GetTimeZoneInformation
IsValidLocale
TlsGetValue
GetSystemTimeAsFileTime
GetFileType
LeaveCriticalSection
GetCurrentProcessId
WriteFile
HeapCreate
EnumDateFormatsExW
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLocaleInfoA
CreateFileA
GetDateFormatA
OpenFileMappingA
GetStdHandle
GetSystemInfo
EnumSystemLocalesA
EnterCriticalSection
HeapAlloc
HeapDestroy
GetModuleFileNameA
FreeEnvironmentStringsA
GetTimeFormatA
FindNextFileW
VirtualFree
CreateMutexA
MultiByteToWideChar
GetLastError

advapi32

CryptSetHashParam
CryptDestroyHash
CryptAcquireContextA
CryptDuplicateKey
LookupPrivilegeDisplayNameW
RegEnumValueW
LookupAccountSidA
CryptSetProviderExA

wininet

CreateUrlCacheContainerW
InternetWriteFileExW
InternetWriteFile
InternetCanonicalizeUrlA

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c78c0c9c638faf05cb612bc4b12cff6

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

wininet

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 20KB - Virtual size: 26KB

.data Size: 88KB - Virtual size: 88KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 20KB - Virtual size: 26KB

.data
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 19KB - Virtual size: 18KB