fe634021b55fabf56f82eac07191194c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe634021b55fabf56f82eac07191194c_JaffaCakes118
Size

337KB
MD5

fe634021b55fabf56f82eac07191194c
SHA1

e187b543a4862442ff0bb51ca1ae18f1761bde90
SHA256

20db58e2696b11ac639ec44f69ff928683940416d51b6428fd6b3373fa19e876
SHA512

058f3e58f0ed551e617a6af3acb26dcb26a137827215c55c7398cf7a34c6437fb4a028cb6322713bcc2e965d44c2c632a59120b267eb07cc81b6c206366dd001
SSDEEP

6144:rGBiPu39EWn7eP9q/XR9phyMyOM2t7NVLf4NjNCOtbao7XNfxEtp8Y:eQU+9khyxORZVLQ/COtbauNKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe634021b55fabf56f82eac07191194c_JaffaCakes118

Files

fe634021b55fabf56f82eac07191194c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a322fca0515fcae52a7a9abeaaa6120

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetNewLinkInfo

comdlg32

PrintDlgW
GetSaveFileNameA
ChooseFontA

comctl32

InitCommonControlsEx

kernel32

GetLocalTime
GetFileType
GetStdHandle
GetStartupInfoA
InitializeCriticalSection
CloseHandle
RtlUnwind
EnumDateFormatsW
VirtualAllocEx
GetCPInfo
VirtualQuery
VirtualFree
GetPrivateProfileSectionW
GetSystemTime
GetSystemTimeAsFileTime
GetStringTypeExA
CreateMutexA
GetLastError
ExitProcess
InterlockedDecrement
WideCharToMultiByte
GetTimeZoneInformation
GetEnvironmentStrings
TlsFree
TerminateProcess
OpenWaitableTimerW
InterlockedExchange
GetConsoleCP
SetFileAttributesA
FlushFileBuffers
LeaveCriticalSection
LCMapStringA
CompareStringW
SetFilePointer
GetTickCount
GetCurrentProcessId
MoveFileExA
GetStartupInfoW
GetCurrentProcess
TlsSetValue
LCMapStringW
TlsGetValue
SetStdHandle
GetStringTypeA
GetEnvironmentStringsW
TlsAlloc
FreeEnvironmentStringsW
GetModuleHandleA
QueryPerformanceCounter
DeleteCriticalSection
FreeEnvironmentStringsA
VirtualAlloc
GetProcAddress
ReadFile
MultiByteToWideChar
WriteFile
FindAtomW
GetCurrentThread
EnumSystemCodePagesA
InterlockedIncrement
GlobalAlloc
HeapCreate
IsBadReadPtr
GetSystemDefaultLangID
GetCommandLineW
GetPriorityClass
IsBadWritePtr
GetStringTypeW
EnterCriticalSection
HeapReAlloc
CompareStringA
SetEnvironmentVariableA
GetVersion
HeapDestroy
HeapAlloc
CompareFileTime
OpenMutexA
GetModuleFileNameA
GetModuleFileNameW
SetLastError
GetCurrentThreadId
SetHandleCount
HeapFree
UnhandledExceptionFilter
GetCommandLineA
LoadLibraryA

user32

CheckRadioButton
DispatchMessageA
IsDialogMessageW
LoadCursorFromFileW
EnumWindowStationsW
SetCaretBlinkTime
DdeClientTransaction
SetWindowTextA
EnumDisplayMonitors
RegisterClassA
CharUpperA
CountClipboardFormats
IsCharLowerW
CopyAcceleratorTableA
IsCharLowerA
ToAscii
LoadStringW
DdeGetData
EnumWindows
TrackMouseEvent
ReuseDDElParam
wvsprintfW
SetSystemCursor
RegisterClassExA

advapi32

CryptSetProviderExW
StartServiceW
RegConnectRegistryA
GetUserNameA
CryptGetDefaultProviderA
StartServiceA
RegQueryInfoKeyA
RegOpenKeyA
RegEnumValueW
RegQueryInfoKeyW
CryptSetProviderW

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a322fca0515fcae52a7a9abeaaa6120

Headers

File Characteristics

Imports

shell32

comdlg32

comctl32

kernel32

user32

advapi32

Sections

.text Size: 175KB - Virtual size: 175KB

.rdata Size: 5KB - Virtual size: 23KB

.data Size: 145KB - Virtual size: 145KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 175KB - Virtual size: 175KB

.rdata
Size: 5KB - Virtual size: 23KB

.data
Size: 145KB - Virtual size: 145KB

.rsrc
Size: 10KB - Virtual size: 9KB