07a92c9a1f4e45ef0f8fce712d74969d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

07a92c9a1f4e45ef0f8fce712d74969d_JaffaCakes118
Size

172KB
MD5

07a92c9a1f4e45ef0f8fce712d74969d
SHA1

a6ff8fdbac1f5867ca46bed5d44665147eef9995
SHA256

4461bb7faf93ca9e8a4685565b73c198cd0d3ce3e2908b622f7ccafb794439b3
SHA512

297ec173d599d7c40bf27b3e2dd9d755a03f0f7502d73f389b0d665f8b6905147477448831c091e5bb364b83541d7bf5963e929c84784bdddf272f7546b12076
SSDEEP

3072:1Xjpi0Gpi72gjMVCLbZvUHqT1GccpufVJU:hVggjMVCLb1UU+QJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a92c9a1f4e45ef0f8fce712d74969d_JaffaCakes118

Files

07a92c9a1f4e45ef0f8fce712d74969d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5daebf8eec2f2244c4549b0759287ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostbyname

wininet

InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState

kernel32

GetModuleHandleA
InterlockedIncrement
GetTempPathA
GetLastError
CreateDirectoryA
lstrcpyA
GetModuleFileNameA
GetFileSize
CreateFileA
DeleteFileA
FlushFileBuffers
WriteFile
GetTickCount
CreateThread
GetCommandLineA
lstrcmpA
GetShortPathNameA
CopyFileA
GetVersion
GetFullPathNameA
DebugBreak
OutputDebugStringA
GetStringTypeExA
GetThreadLocale
GetProcAddress
GetDiskFreeSpaceA
CreateMutexA
MulDiv
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
Sleep
lstrcatA
GetVersionExA
CloseHandle
LoadLibraryA
HeapAlloc
GetSystemInfo
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceA
GlobalAlloc
lstrlenW
MultiByteToWideChar
GlobalUnlock
GlobalLock
CompareStringA
lstrcmpiA
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
ExitProcess
HeapReAlloc
HeapFree
ReadFile
GetACP
GetOEMCP
InterlockedDecrement
lstrlenA
GetModuleFileNameW
SetEndOfFile
GetModuleHandleW
GetCurrentThreadId
SetLastError
LoadLibraryW
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
RtlUnwind
GetStdHandle
LCMapStringA
LCMapStringW
GetFileType
TerminateProcess
SetStdHandle

user32

DispatchMessageA
ShowWindow
SetWindowTextA
IsDialogMessageA
SendMessageA
CharLowerA
GetMessageA
PostQuitMessage
LoadIconA
InvalidateRgn
RedrawWindow
GetFocus
CharNextA
GetDlgItem
DestroyWindow
SetWindowPos
SetCapture
ReleaseCapture
wsprintfA
CreateWindowExA
CreateAcceleratorTableA
GetDesktopWindow
GetClassNameA
IsWindow
BeginPaint
FillRect
EndPaint
GetDC
ReleaseDC
MapWindowPoints
GetWindowRect
GetClientRect
PostMessageA
MoveWindow
IsChild
SetFocus
GetSysColor
CallWindowProcA
GetWindowTextA
DefWindowProcA
GetClassInfoExA
RegisterClassExA
RegisterWindowMessageA
LoadCursorA
CreateDialogIndirectParamA
GetWindowLongA
GetParent
GetWindow
SystemParametersInfoA
LoadStringA
wvsprintfA
InvalidateRect
SetWindowLongA
GetWindowTextLengthA

gdi32

BitBlt
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
GetObjectA
GetStockObject
CreateSolidBrush
DeleteDC
SelectObject
GetDeviceCaps

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

shell32

SHGetMalloc
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellExecuteA
SHFileOperationA

ole32

CoTaskMemAlloc
OleUninitialize
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoInitialize
CoUninitialize

oleaut32

SysStringLen
LoadRegTypeLi
SysAllocString
SysAllocStringLen
VariantClear
SysFreeString
OleCreateFontIndirect

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5daebf8eec2f2244c4549b0759287ea

Headers

File Characteristics

Imports

wsock32

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 56KB - Virtual size: 53KB