0aa2e1b127c54cf3d207472ec9a83205_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0aa2e1b127c54cf3d207472ec9a83205_JaffaCakes118
Size

52KB
MD5

0aa2e1b127c54cf3d207472ec9a83205
SHA1

45c60f465da10e84aedaa864bd8f9d6d70ef7919
SHA256

1b70a1ad369fe2ccd8cbb32e848244799d0da7b5a554b601f7e9b9336d337cf3
SHA512

d1feeffcb3e901a16ecccaf7d6d33af93259647e1421fef960555caacbaf3d13c9462faa081e9a3629fa2919720380a8f610b3c295e0c437f07d03abead64ad7
SSDEEP

1536:yzLC+vZkt5gpA3j2IFsluURJFNDf4SIO40nToIfhdew:yzLCskpSIFQT4w4YTBfhdew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa2e1b127c54cf3d207472ec9a83205_JaffaCakes118

Files

0aa2e1b127c54cf3d207472ec9a83205_JaffaCakes118
.exe windows:4 windows x86 arch:x86

712d38477b98d551b3396eba9234b79c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncmp
memmove
strncpy
strlen
strcpy
strcmp
strcat
memcpy
malloc
free

kernel32

GetModuleHandleA
HeapCreate
SetConsoleCtrlHandler
GetTempFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
RemoveDirectoryA
HeapDestroy
ExitProcess
GetCommandLineA
GetNativeSystemInfo
GetVersionExA
HeapAlloc
HeapFree
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetExitCodeProcess
GetCurrentDirectoryA
GetTempPathA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFileAttributesA
DeleteFileA
SetCurrentDirectoryA
CreateDirectoryA
FindClose
FindFirstFileA
GetLastError
FindNextFileA
WriteFile
CreateFileA
SetFilePointer
GetFileSize
ReadFile
HeapReAlloc

user32

EnableWindow
DefWindowProcA
DestroyWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassExA
IsWindowEnabled
GetSystemMetrics
CreateWindowExA
SetWindowLongA
SendMessageA
SetFocus
CreateAcceleratorTableA
SetForegroundWindow
BringWindowToTop
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
EnumWindows
SetWindowPos

gdi32

GetStockObject

comctl32

InitCommonControlsEx

shell32

ShellExecuteExA

ole32

CoInitialize

shlwapi

PathRenameExtensionA
PathAddBackslashA
PathQuoteSpacesA
PathGetArgsA

Sections

.code
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

712d38477b98d551b3396eba9234b79c

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comctl32

shell32

ole32

shlwapi

Sections

.code Size: 10KB - Virtual size: 9KB

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 3KB

.code
Size: 10KB - Virtual size: 9KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 3KB