1776f640b4448a70d9853a1c0e1518cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1776f640b4448a70d9853a1c0e1518cd_JaffaCakes118
Size

1.6MB
MD5

1776f640b4448a70d9853a1c0e1518cd
SHA1

dfbdc90b7bf6aa783f219aa46f053ebfa291a6d5
SHA256

449cd649f3d72c84a48fe24b6a07dc068ad43089ad0682d593ed546b4f36d16f
SHA512

14e760e23a071bb9a88d44de8762c7cc5fd4a42b6fca13e723f17cb02fe1c899eca9798fbca69b846fea6350624cd93add7153819ea2c7302066ec26d0236fef
SSDEEP

24576:aCKWCFeM8xoIoJfrL+zYWe+vLfiSJcSsc1T5FBY4ql2F/YZHi1ELCYi:zhohdH+zYCiSiSrZ5r/qy/YlaEL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1776f640b4448a70d9853a1c0e1518cd_JaffaCakes118

Files

1776f640b4448a70d9853a1c0e1518cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36c3c3fe7de48f8e5dd3258888303f63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA
PathFileExistsA

comctl32

InitCommonControlsEx
ord17

kernel32

GetLocaleInfoA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetCPInfo
GetOEMCP
VirtualProtect
IsBadCodePtr
IsBadReadPtr
VirtualQuery
InterlockedExchange
SetFilePointer
IsBadWritePtr
VirtualAlloc
HeapSize
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
MultiByteToWideChar
ReadFile
GetSystemInfo
CreateFileA
CloseHandle
LoadLibraryA
WaitForSingleObject
DeleteFileA
GetTempPathA
WideCharToMultiByte
GetEnvironmentStringsW
GetACP
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetLastError
CreateDirectoryA
ExitProcess
RtlUnwind
RaiseException
RemoveDirectoryA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
HeapFree
SetUnhandledExceptionFilter
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
SetHandleCount

user32

SendDlgItemMessageA
SetDlgItemTextA
GetDlgItem
SetFocus
ShowWindow
DestroyWindow
CreateDialogParamA
SetWindowPos
DialogBoxParamA
SetWindowLongA
LoadIconA
SetWindowTextA
CreateWindowExW
EndDialog
MessageBoxA
GetClassInfoExW
RegisterClassExW
FillRect
CallWindowProcA
BeginPaint
SendMessageA
GetClientRect
GetWindowTextA
GetWindowLongA
EndPaint

gdi32

CreateSolidBrush
DeleteObject
SetBkMode
SetTextColor
TextOutA
CreateFontIndirectA
SelectObject

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

ShellExecuteExW
ShellExecuteExA

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.boom
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

36c3c3fe7de48f8e5dd3258888303f63

Headers

File Characteristics

Imports

shlwapi

comctl32

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 96KB - Virtual size: 92KB

.boom Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 96KB - Virtual size: 92KB

.boom
Size: 1.4MB - Virtual size: 1.4MB