0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118
Size

153KB
MD5

0eaa38ff4429df0ebc87e23af4f6948b
SHA1

2416af8c2120b72a2df4f5ec8e83ac22dbb5d0ca
SHA256

e4b2c7d488ade99b836841206835e7677759a6aad7cc30264fe327787eefa22c
SHA512

20d00fcb92bf7d022ee6faed576d32d83036a0447cfe914a0859f2ae19b547286d643c0a7d876c440cec9a2c2d02dc795e8facaad23cfc1d9c2057b4714177d9
SSDEEP

3072:8d/no+Yfl70Pu3om6Xgl+CbJYh4tFDtwVYj2MXziOfEgdsyN:O/o+zhmt+5SFp7tLMgdX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118

Files

0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

159b4ee1b0ff368d3820f78ea571a220

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetWriteFile
InternetOpenA

asycwser

_Xbig
_Stod
_Strxfrm
_FDscale
_Eps
_LSnan
_FRteps
_LCosh

kernel32

CreateProcessA
GetCurrentThreadId
CreateThread
lstrlenW
SetThreadAffinityMask
TerminateThread
GlobalAlloc
CreateFileMappingW
ReleaseMutex
VirtualQueryEx
GetProcAddress
lstrcpyA
lstrcpynA
UnmapViewOfFile
GlobalFree
RtlUnwind
DeleteFileA
MapViewOfFile
RaiseException
MultiByteToWideChar
GetCurrentThread
GetSystemTime
GetCommandLineW
GetFileAttributesW
GlobalLock
TerminateProcess
GetModuleHandleA
GetTempPathA
CloseHandle
GetDateFormatA
WaitForMultipleObjects
QueryPerformanceCounter
UnhandledExceptionFilter
Sleep
LoadResource
ReadFile
GetVolumeInformationA

comdlg32

ChooseFontA
FindTextA

user32

SystemParametersInfoA
SetRectEmpty
GetMenuState
SendMessageW
DrawIconEx
EnumWindows
DrawTextW
FindWindowExA
DrawFrameControl
DrawTextA
CharUpperBuffW
SetMenu
DestroyCursor
GetKeyNameTextW
CharUpperA
GetScrollRange
NotifyWinEvent
ReleaseCapture
MapWindowPoints
GetWindowPlacement
CopyImage
GetDCEx
IsCharAlphaA
RegisterClipboardFormatA
CharLowerBuffA
InsertMenuA
GetDoubleClickTime
GetScrollInfo
CreatePopupMenu
EnableScrollBar
SetWindowPlacement
GetCursorPos
CharLowerBuffW
PostQuitMessage
DrawFocusRect
SetKeyboardState
TranslateMessage
GetWindowRect
GetMessageTime
ShowCaret
CreateMenu
ActivateKeyboardLayout

oleaut32

SafeArrayDestroy
SafeArrayCreateVector
SafeArrayPutElement
CreateErrorInfo

gdi32

GetTextMetricsA
BitBlt
SetTextColor
CreateBrushIndirect
CreateBitmap
StartDocA
GdiFlush
CreateFontIndirectA
CreateDIBitmap
SelectClipRgn
GetTextExtentPoint32A
PlayEnhMetaFile
SetWindowExtEx
GetRandomRgn
GetTextExtentPointA
SetEnhMetaFileBits
DeleteEnhMetaFile
CreatePen
SetROP2
GetNearestPaletteIndex
RealizePalette
SetPixelV
CreateCompatibleDC
Pie
CreateHalftonePalette

ole32

CoCreateInstance
CoGetClassObject
CoTaskMemFree
CoInitialize
IsEqualGUID
CoUninitialize
CoTaskMemAlloc
OleSetClipboard

shell32

SHBrowseForFolderA

comctl32

ImageList_Create
ImageList_GetImageCount

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

159b4ee1b0ff368d3820f78ea571a220

Headers

DLL Characteristics

File Characteristics

Imports

wininet

asycwser

kernel32

comdlg32

user32

oleaut32

gdi32

ole32

shell32

comctl32

Sections

.text Size: 146KB - Virtual size: 148KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 148KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB