15244a37630cc6efe5ad30b295aa598c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15244a37630cc6efe5ad30b295aa598c_JaffaCakes118
Size

92KB
MD5

15244a37630cc6efe5ad30b295aa598c
SHA1

d359e9a8b094af660bee6efe6195b332fd4365e7
SHA256

13a33ea8b4ade7a58e4f2a6d9a965ad8cffd7bb2f7f319d30a18878d5095da90
SHA512

935c744261709418935d938ebcbe5acb30714efbedbba9550c4821b929e867a459dd992c130cdf625e08d0064266af0a96f8fee7c6104d8681e8ae50f261da60
SSDEEP

1536:inv2/81VWycatxB/UAoKtZFQhXWP27oE9svIonz+Ii+ZlJyeto:ivRL9FEqp+Ii+ZlJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15244a37630cc6efe5ad30b295aa598c_JaffaCakes118

Files

15244a37630cc6efe5ad30b295aa598c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b38bb7b84f12c096170d6f2115d3fd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

CreateFileW
GetDriveTypeW
GetLogicalDriveStringsW
ReadFile
SetFilePointerEx
WriteFile
FindClose
FindFirstFileW
GetTickCount
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetFileAttributesW
GetFullPathNameW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
SetFileTime
GetFileSize
GetFileTime
SetFileAttributesW
GetLastError
CopyFileW
LockResource
LoadResource
FindResourceW
SetVolumeMountPointW
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
GetLogicalDrives
Sleep
CreateThread
GetCommandLineW
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetStdHandle
GetOEMCP
GetACP
LoadLibraryA
InterlockedExchange
GetStringTypeW
GetStringTypeA
GetCPInfo
GetLocaleInfoA
IsBadCodePtr
HeapSize
IsBadReadPtr
SetUnhandledExceptionFilter
SetFilePointer
DeviceIoControl
CloseHandle
FormatMessageW
LocalFree
OutputDebugStringW
FindNextFileW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
VirtualProtect
GetSystemInfo
VirtualQuery
ExitProcess
TerminateProcess
GetStdHandle
GetModuleFileNameA

user32

wsprintfW
EndDialog
GetWindowTextW
GetWindowRect
SystemParametersInfoW
GetSystemMenu
AppendMenuW
GetDlgItem
MoveWindow
SetFocus
SetWindowTextW
EnableWindow
SendMessageW
LoadStringW
MessageBoxW
FindWindowW
SetForegroundWindow
DialogBoxParamW
PostMessageW

advapi32

FreeSid
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc

ole32

CoInitializeEx
CoUninitialize

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b38bb7b84f12c096170d6f2115d3fd2

Headers

File Characteristics

Imports

comctl32

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 14KB

.SharedD Size: 4KB - Virtual size: 4B

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 14KB

.SharedD
Size: 4KB - Virtual size: 4B

.rsrc
Size: 12KB - Virtual size: 9KB