028e1ced593eb23be422a7250f5c80a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

028e1ced593eb23be422a7250f5c80a8_JaffaCakes118
Size

167KB
MD5

028e1ced593eb23be422a7250f5c80a8
SHA1

45278c271daad8ef9d1a49b2ca21e245e0a5c5b7
SHA256

0a364950a412c05edb7afce7f6b8c347c1effbe8197c0821763869466b14e53e
SHA512

5bb709fa229e37ae737417a301e5ecb01424e206cb48e97cc1ae3c94de6c62b78e866dfa0e05365c15c52d154503b45ff19f2d8ff52a75df63a4801cd85a9258
SSDEEP

3072:j7XdyeLiDIG+MrLE69kHpFLw90lfZSeDIRKe0pewIUW1xTBwUQBzbTFr:j7oeLiDIG+MPE6c2Qz0RKTYv1qdRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028e1ced593eb23be422a7250f5c80a8_JaffaCakes118

Files

028e1ced593eb23be422a7250f5c80a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
TlsGetValue
GetFullPathNameA
GetOEMCP
GetThreadIOPendingFlag
HeapCreate
EnterCriticalSection
MultiByteToWideChar
GetStringTypeW
CloseHandle
IsBadCodePtr
GetFullPathNameW
FreeLibrary
ResetEvent
GlobalAlloc
GetSystemTime
lstrcmpW
GetCPInfo
GetEnvironmentStringsW
TlsAlloc
GetFileType
GetStartupInfoA
SetPriorityClass
InterlockedIncrement
HeapAlloc
ReleaseSemaphore
GetPriorityClass
UnmapViewOfFile
SetEvent
LeaveCriticalSection
lstrcpyA
IsBadReadPtr
FileTimeToSystemTime
CompareStringA
GetACP
LoadLibraryA
CreateThread
HeapSize
CreateMutexA
TransmitCommChar
GlobalUnlock
DeleteCriticalSection
GetPrivateProfileStringA
lstrcmpA
ExitThread
ExitProcess
RaiseException
FlushFileBuffers
GetCommandLineA
InterlockedExchange
LCMapStringW
GetEnvironmentStrings
CreateFileW
Sleep
SetStdHandle
CreateFileMappingA
GetStdHandle
LCMapStringA
GetModuleHandleA
EnumResourceNamesW
IsBadWritePtr
MapViewOfFile
ExitProcess
GetTempPathA
InterlockedDecrement
GetEnvironmentVariableA
FreeEnvironmentStringsW
CreateSemaphoreA
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
TlsSetValue
WriteFile
WaitForSingleObject
GetUserDefaultLCID
GetDiskFreeSpaceExA
SetEndOfFile
LoadLibraryW
UnhandledExceptionFilter
CompareStringW
GlobalFree
GetProcAddress
SetHandleCount
GetLastError
FileTimeToLocalFileTime
WritePrivateProfileStringA
TlsFree
HeapFree
GetCurrentThreadId
IsDBCSLeadByte
GetTempFileNameA
SetLastError
GetThreadPriority
HeapDestroy
GetStringTypeA
OutputDebugStringA
GetTimeZoneInformation
InitializeCriticalSection
GetCurrentProcess
GetTickCount
RtlUnwind
GetTempPathW
HeapReAlloc
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

user32

CharUpperA
CharNextA
MessageBoxA
wsprintfW
GetKeyState
wsprintfA
CharLowerA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

Imports

kernel32

msimg32

shlwapi

advapi32

user32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.crt
Size: 512B - Virtual size: 68KB