1027013fe88f154a936ecceab271e7a7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1027013fe88f154a936ecceab271e7a7_JaffaCakes118
Size

196KB
MD5

1027013fe88f154a936ecceab271e7a7
SHA1

267eb31680080a7caac7e690fceca0b3d80ee469
SHA256

8cb8958eeb58e33b4bbeb8ab318492cf883b827696cf411c927fa737f3556482
SHA512

b288631b0550c870daa3b57c19f0c3fc67609b608da52e824119559600a51362c393c4c5224d33872df20a8b191f3f3ab6ba61ae81b28982cbb14c058620342b
SSDEEP

3072:9GW2m4M8CN3jd1AhnNz4i3u9w0HLqHArnoR15bwNi8rhrJvlPI:9GU4MrZjdqhnNz76FOHAQLbw7rhjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1027013fe88f154a936ecceab271e7a7_JaffaCakes118

Files

1027013fe88f154a936ecceab271e7a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateDirectoryA
lstrcpynA
SetLastError
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
MoveFileA
lstrcmpiA
FlushFileBuffers
WriteFile
SetEndOfFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
DeleteFileA
SetFileAttributesA
FileTimeToSystemTime
FindClose
FindFirstFileA
GetLocalTime
lstrcatA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
Sleep
IsBadReadPtr
CreateProcessA
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
CreateMutexA
GetCommandLineA
lstrlenW
MultiByteToWideChar
LoadLibraryExA
IsDBCSLeadByte
RemoveDirectoryA
FindNextFileA
ResumeThread
SuspendThread
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
GetStartupInfoA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
CopyFileA
LocalFree
IsBadCodePtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
GetFileType
GetSystemTimeAsFileTime
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
lstrlenA
GetVersionExA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
lstrcpyA
FreeLibrary
ReadFile
CreateFileA
GetFileSize
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
RaiseException

user32

ModifyMenuA
DestroyMenu
SetWindowLongA
GetWindowLongA
SetTimer
KillTimer
DestroyWindow
IsDialogMessageA
SetWindowPos
SendMessageA
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
MessageBoxA
IsWindow
EndDialog
LoadImageA
GetSystemMetrics
DialogBoxParamA
DestroyIcon
GetSubMenu
LoadIconA
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetActiveWindow
ShowWindow
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
CreateDialogParamA
DefWindowProcA
CharNextA
CharUpperA
PostQuitMessage
LoadMenuA
wsprintfA
UnregisterClassA
MapWindowPoints

advapi32

RegCloseKey
RegOpenKeyExA
OpenProcessToken
GetTokenInformation
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteExA
Shell_NotifyIconA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoInitializeSecurity
CoCreateGuid
OleRun
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
VarBstrCat
SafeArrayDestroy
SafeArrayGetElement

shlwapi

PathFileExistsA
PathRemoveFileSpecA
PathSkipRootA

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate

wininet

HttpSendRequestExA
HttpEndRequestA
InternetSetCookieA
InternetWriteFile
HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetConnectA
InternetAttemptConnect
InternetCloseHandle
InternetCrackUrlA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

rpcrt4

wininet

version

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 16KB - Virtual size: 14KB