039bf825a5fc976dc6fe28172180c0e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

039bf825a5fc976dc6fe28172180c0e0_JaffaCakes118
Size

104KB
MD5

039bf825a5fc976dc6fe28172180c0e0
SHA1

f8413b7d084734709f04820dc0eaf037d130ac51
SHA256

bbd9c12aab130b2318623254948c37e7ebd9266cc4f60cfc6692a7105e2bea63
SHA512

ae2e49afd1c960f22652be5eeeadd4d4ebb3097d414a7299676ec86b9a4b98fa5245d8b4a1b4360109f6ae9e392bddcc29361d21198244dabed5c93936ad6935
SSDEEP

1536:kt9sm0YiZ66RFVBr60WHzb1wcoCEYwu6PaDsZhO:kvsmwVhBO0eb1wco86PesZhO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039bf825a5fc976dc6fe28172180c0e0_JaffaCakes118

Files

039bf825a5fc976dc6fe28172180c0e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b051bf3e949c60e80b599a9320fd5534

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetMalloc
ShellExecuteA
SHGetSpecialFolderPathA

rasapi32

RasEnumDevicesA
RasGetConnectStatusA
RasEnumConnectionsA
RasHangUpA
RasGetErrorStringA
RasSetEntryDialParamsA
RasDialA
RasDeleteEntryA
RasSetEntryPropertiesA
RasGetProjectionInfoA

kernel32

FlushFileBuffers
GetOEMCP
GetACP
LoadLibraryA
MultiByteToWideChar
GetProcAddress
VirtualFree
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
GetVersionExA
Sleep
CreateMutexA
OpenMutexA
ReleaseMutex
GetTickCount
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
CopyFileA
DeleteFileA
GetModuleFileNameA
CreateDirectoryA
GetEnvironmentVariableA
RemoveDirectoryA
GetLocaleInfoA
CloseHandle
ReadFile
GetFileSize
CreateFileA
CreateThread
TerminateThread
VirtualAlloc
RtlUnwind
WriteFile
GetCPInfo
SetFilePointer
GetLastError
GetStringTypeW
SetStdHandle
HeapCreate
GetStringTypeA
HeapDestroy
GetVersion
WideCharToMultiByte
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA

user32

SendDlgItemMessageA
GetClassNameA
EnumChildWindows
EnumWindows
EnableWindow
KillTimer
SetTimer
ShowWindow
SendMessageA
CheckDlgButton
IsDlgButtonChecked
GetWindowRect
SetWindowPos
SetWindowTextA
SetFocus
DialogBoxParamA
LoadIconA
MessageBoxA
SystemParametersInfoA
GetDlgItem
SetDlgItemTextA
EndDialog
GetDlgItemTextA

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b051bf3e949c60e80b599a9320fd5534

Headers

File Characteristics

Imports

advapi32

shell32

rasapi32

kernel32

user32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 8KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 8KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB