0d68a6ce13344a7057e2c74566d64f0d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d68a6ce13344a7057e2c74566d64f0d_JaffaCakes118
Size

144KB
MD5

0d68a6ce13344a7057e2c74566d64f0d
SHA1

2e29162f820de5cd988a5c8d3d1d7b8e004aedab
SHA256

6446265f75eac1293c5dcae969517a2b154c5302cf2ee03f6f391ae86835f7ac
SHA512

706aadaea76708ee476c39056141e933ea55f6957b28f60c364b99a89dae646234acca1895f2b500172301588ab2754d4df2d46a42cf48f020867c68f988b87a
SSDEEP

3072:f73OQzGFy4POQkCqibhzYmJooF/NgD0xVM2sxEowRo1egvd:fQy4NuoOcmD0BYJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d68a6ce13344a7057e2c74566d64f0d_JaffaCakes118

Files

0d68a6ce13344a7057e2c74566d64f0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32ffca73619f0935bb7e65996e0d0f81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetLastError
GetVersionExA
ReadFile
WriteFile
SetFilePointer
IsValidCodePage
CreateFileA
CloseHandle
LoadLibraryA
FreeLibrary
GlobalAlloc
OpenFile
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetProcAddress
GetPrivateProfileIntA
GetCurrentProcess
GetCurrentThread
GetLocaleInfoA
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetTickCount
GetModuleFileNameA
lstrcmpiA
GetTempPathA
SetErrorMode
GetWindowsDirectoryA
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
lstrcpyA
GetSystemInfo
lstrcatA
GetExitCodeProcess
VerLanguageNameA
CreateProcessA
GetDiskFreeSpaceA
_lclose
IsBadReadPtr
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetFileType
SetUnhandledExceptionFilter
IsBadCodePtr
FlushFileBuffers
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
LCMapStringA
LCMapStringW
SetStdHandle
GetStdHandle

user32

LoadIconA
SetTimer
PostQuitMessage
PostMessageA
KillTimer
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA
DialogBoxParamA
ShowWindow
GetDlgItem
EndDialog
CharNextA
CreateDialogParamA
DestroyWindow
IsWindow
IsDialogMessageA
PeekMessageA
SendDlgItemMessageA
ExitWindowsEx
MsgWaitForMultipleObjects
CharPrevA
LoadStringA
SetCursor
GetParent
GetSystemMetrics
GetClientRect
GetWindowTextLengthA
GetWindowTextA
GetDC
ReleaseDC
SendMessageA
MoveWindow
CreateWindowExA
DestroyIcon
DrawIcon
EndPaint
LoadCursorA
SetWindowTextA
RegisterClassA
BeginPaint
GetWindowPlacement
GetWindowRect

gdi32

GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPointA
GetObjectA
DeleteObject

advapi32

AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA
RegSetValueExA
OpenThreadToken
LookupPrivilegeValueA
OpenProcessToken
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32ffca73619f0935bb7e65996e0d0f81

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

version

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 64KB - Virtual size: 71KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 64KB - Virtual size: 71KB

.rsrc
Size: 20KB - Virtual size: 16KB