1033de94b7ddddadf45b0a64ca46c274_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1033de94b7ddddadf45b0a64ca46c274_JaffaCakes118
Size

569KB
MD5

1033de94b7ddddadf45b0a64ca46c274
SHA1

1d2c34220f95f9a73b8b6a7ccd7cf145ef5a32dc
SHA256

8ebd935237d0f41506cfe34030997c15076d010672daf378c5ca72356c066209
SHA512

eaaf83df26dd9519abafcc68c06fb36b1aac799c5b1fef6d6b08cc5badbfbebc8ea4a69454bbf0ebccbd98dd3c767c39a840b07e6cf533706a59791d19f3171b
SSDEEP

12288:s83ojBRBEM2WgB19ngR7TVCTQkyLueIodOPC23i/VO:zmBn2XB1xgRFCEkyLueIodOPCQi/VO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1033de94b7ddddadf45b0a64ca46c274_JaffaCakes118

Files

1033de94b7ddddadf45b0a64ca46c274_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30642ce84dca3595883bdfc2d6482e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

user32

PaintDesktop
LoadBitmapW
RegisterClassA
SendIMEMessageExA
CreateMDIWindowW
RegisterClassExA
GetUserObjectSecurity
CascadeWindows
SetShellWindow
DdeQueryConvInfo
DispatchMessageW
DefDlgProcA
BeginPaint
PtInRect
GetDC
EnumWindows
EditWndProc
MapVirtualKeyExW
RegisterDeviceNotificationA

wininet

InternetUnlockRequestFile
SetUrlCacheEntryGroup
RetrieveUrlCacheEntryStreamW

advapi32

CryptEnumProviderTypesW
RegSetValueExW
RegQueryMultipleValuesA
CryptSetProviderExA
RegSaveKeyA
LookupAccountNameW
LookupSecurityDescriptorPartsW
RegNotifyChangeKeyValue
LogonUserA

kernel32

MultiByteToWideChar
HeapSize
GetLocaleInfoA
VirtualAlloc
TlsSetValue
InterlockedExchange
GetSystemTimeAsFileTime
GetModuleHandleA
GetStringTypeW
VirtualQuery
GetACP
OpenMutexA
IsBadWritePtr
GlobalCompact
LCMapStringA
CompareStringA
SetCriticalSectionSpinCount
DeleteCriticalSection
GetProcessAffinityMask
GetSystemInfo
GetCurrentThreadId
EnterCriticalSection
HeapFree
GetUserDefaultLCID
OpenEventW
FreeEnvironmentStringsW
GetLocaleInfoW
VirtualProtect
IsValidCodePage
CommConfigDialogW
InitializeCriticalSection
LCMapStringW
GetCurrentProcessId
GetStartupInfoA
GetEnvironmentStrings
TlsGetValue
DosDateTimeToFileTime
HeapReAlloc
SetEnvironmentVariableA
GetOEMCP
QueryPerformanceCounter
CopyFileExA
ContinueDebugEvent
GetTimeFormatA
GetComputerNameA
SetLocaleInfoW
GetCurrentProcess
GetProcAddress
CompareStringW
GlobalUnlock
CreateMutexA
IsValidLocale
CloseHandle
EnumSystemLocalesA
FreeEnvironmentStringsA
ReadFile
EnumResourceTypesW
FormatMessageA
GetLastError
ExitProcess
GetFileType
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetStdHandle
OpenMutexW
SetHandleCount
GetModuleFileNameA
HeapDestroy
GetDateFormatA
GetCommandLineA
GetStringTypeA
GetTimeZoneInformation
SetLocalTime
LeaveCriticalSection
HeapAlloc
WideCharToMultiByte
TlsAlloc
HeapCreate
GetStringTypeExW
LockFileEx
GetCPInfo
LoadLibraryA
RtlUnwind
VirtualFree
TlsFree
WriteFile
SetLastError
FlushFileBuffers
TryEnterCriticalSection
GetVersionExA
SetConsoleCtrlHandler
GetCurrentThread
GetEnvironmentStringsW
SetFilePointer
GetTickCount
GetPrivateProfileStructA
EnumCalendarInfoA

gdi32

GetPixelFormat
GetTextExtentPointA
StrokeAndFillPath
EqualRgn
CreatePolyPolygonRgn
GetObjectW
ColorCorrectPalette
GetLayout
GetSystemPaletteUse
GetICMProfileW
InvertRgn
GetMetaFileBitsEx
EndPage
EndPath
GetMetaRgn

shell32

RealShellExecuteExW

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30642ce84dca3595883bdfc2d6482e62

Headers

File Characteristics

Imports

comctl32

user32

wininet

advapi32

kernel32

gdi32

shell32

Sections

.text Size: 194KB - Virtual size: 194KB

.rdata Size: 9KB - Virtual size: 40KB

.data Size: 358KB - Virtual size: 357KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 194KB - Virtual size: 194KB

.rdata
Size: 9KB - Virtual size: 40KB

.data
Size: 358KB - Virtual size: 357KB

.rsrc
Size: 7KB - Virtual size: 6KB