3f16ad1b0bb58cc5c58052146fbca21d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3f16ad1b0bb58cc5c58052146fbca21d_JaffaCakes118
Size

11.0MB
MD5

3f16ad1b0bb58cc5c58052146fbca21d
SHA1

bf6ceff9440f432747c70fee841bf97cdb1fce4b
SHA256

0845f407376263be0188765325f04fa843e9dca77f4d16483630298cfcd25fd1
SHA512

d38afe4c0b86c29450e7e154cfc4b4a3622ab836e73657f3ae09a52dee7dac9e6d7ee68efe9106c401602517d8e573aa561b6650fe1d3e3d9ebc22b979e39c7f
SSDEEP

196608:tjiMFudD0W7A8jsI8dnS7N+NLnWiar0EDOIY3bOgqxQTHWUKYhRxIW:tjmaW7A8Y/pS7oNLnFEDv8GQTHWUKY//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f16ad1b0bb58cc5c58052146fbca21d_JaffaCakes118

Files

3f16ad1b0bb58cc5c58052146fbca21d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5ce5ab0f5e34fcef8c5f6fa1421f1f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
FindFirstFileA
GetFileAttributesA
GetTempPathA
FreeResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
WritePrivateProfileStringA
CreateFileA
LockResource
LoadResource
EnumResourceNamesA
WaitForSingleObject
CreateProcessA
GetModuleFileNameA
GetPrivateProfileStringA
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
DeleteFileA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
LCMapStringW
GetEnvironmentVariableA
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
GetCurrentProcess
TerminateProcess
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
lstrcatA
lstrlenA
GetStringTypeA
lstrcpyA
HeapFree
ExitProcess

user32

WaitForInputIdle
FindWindowA
ShowWindow
SetForegroundWindow
RegisterClassA
DefDlgProcA
LoadCursorA
BeginPaint
IntersectRect
FillRect
OffsetRect
EndPaint
GetWindowDC
GetSysColor
ReleaseDC
DefWindowProcA
GetWindowLongA
SetWindowLongA
GetClientRect
InvalidateRect
GetDlgItem
SetWindowTextA
UpdateWindow
LoadStringA
wsprintfA
GetWindowRect
GetSystemMetrics
SetWindowPos
DestroyWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
CreateDialogParamA

gdi32

CreatePen
SelectObject
MoveToEx
LineTo
GetStockObject
DeleteObject
CreateSolidBrush

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.0MB - Virtual size: 11.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5ce5ab0f5e34fcef8c5f6fa1421f1f3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 23KB

.rsrc Size: 11.0MB - Virtual size: 11.0MB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 23KB

.rsrc
Size: 11.0MB - Virtual size: 11.0MB