028127e54934e67f807643a89eda9a92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

028127e54934e67f807643a89eda9a92_JaffaCakes118
Size

1.2MB
MD5

028127e54934e67f807643a89eda9a92
SHA1

e8b63953366b98e21904694f141531bae87085d3
SHA256

4d8c56dbaf7df71fe89a39b6d3cc108b3f49f30ebceaab6d7ee60fb61ac6e9a9
SHA512

8395b1b105dd5530c8cec1c402ceda7fa336ac51cdf98a9bce2b4dc372a7663f3d076385b2897d0abeb2409e11ac5aa47426d116f9c05ec491b8026ee5109c80
SSDEEP

12288:XhtrgMWD7UzeGeF27RG3wPY3kDtSTXH1EasH4zfFy6nnNRwP4ehlGnEZZUYSzRvl:XhtQkXOwXDtKX1pXt7ehA6UYSl2+QwL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028127e54934e67f807643a89eda9a92_JaffaCakes118

Files

028127e54934e67f807643a89eda9a92_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a1cdd1f128c902394df46b42be65834f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetTopWindow
GetSysColorBrush
GetSysColor
HideCaret
EndPaint
GetWindowDC
GetMenuItemInfoW
GetMenuItemID
DestroyMenu
GetSystemMetrics
SetTimer
CharNextW
CreateDialogParamW
DeferWindowPos
RegisterClassW
CallWindowProcW
DefWindowProcW
ActivateKeyboardLayout

advapi32

RegCloseKey
RegOpenKeyExW

kernel32

InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetVersion
GlobalFree
LocalAlloc
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
CloseHandle
GetSystemTime
GetSystemInfo
GetModuleHandleW
CreateProcessW
FindResourceExW
GetSystemDirectoryW
FindNextFileW
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError

shlwapi

AssocCreate
PathCreateFromUrlW
PathSkipRootW
PathRemoveFileSpecW
PathRemoveBlanksW
PathRemoveBackslashW
PathParseIconLocationW
PathIsRootW
PathFindFileNameW
PathFindExtensionW
PathAddBackslashW
StrCmpW
StrTrimW
StrCmpNW
PathCombineW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 539KB - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e2bo5
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1cdd1f128c902394df46b42be65834f

Headers

File Characteristics

Imports

user32

advapi32

kernel32

shlwapi

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 539KB - Virtual size: 7.8MB

.e2bo5 Size: 308KB - Virtual size: 308KB

.rsrc Size: 366KB - Virtual size: 366KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 539KB - Virtual size: 7.8MB

.e2bo5
Size: 308KB - Virtual size: 308KB

.rsrc
Size: 366KB - Virtual size: 366KB