23a1dfb658ad39bdc8fd3bc7140e93cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

23a1dfb658ad39bdc8fd3bc7140e93cd_JaffaCakes118
Size

352KB
MD5

23a1dfb658ad39bdc8fd3bc7140e93cd
SHA1

c23a519f8db5c5b0495cf25f3a06c46c02d176a8
SHA256

4514d9801829ea07cb1b110388c8837c1e614efda4b6b0b20c43a8cd388408bc
SHA512

380441fbfd2522777c396b8184fda163e24d6d591fa8f72327fdf1cd1a9a6f21b32c0be881a612a91afbec2f7001c6e67e96ecbdce99fde3a0a7bb8a1acfe349
SSDEEP

6144:FewxeeqSjqfVi/1TC3EMO5fNmK0fl1je0woj3LTv45t4atc0lKfXfSqqc:FeQv+fVi/1TbmFjeAVat7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23a1dfb658ad39bdc8fd3bc7140e93cd_JaffaCakes118

Files

23a1dfb658ad39bdc8fd3bc7140e93cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1468f8107aa7a36d4a20be321aafc42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetFullPathNameA
CreateDirectoryA
GetVersionExA
SetEndOfFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetDriveTypeA
GetCurrentDirectoryA
HeapSize
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
WriteFile
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FreeLibrary
GetEnvironmentVariableA
GetVersion
GetStartupInfoA
TerminateProcess
ExitProcess
GetLastError
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
Sleep
GetCommandLineA
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
DeleteFileA
GetProcAddress
GetFileAttributesA
SetPriorityClass
FindClose
GetModuleHandleA
GetCurrentProcess
GetTempPathA

user32

SetDlgItemTextA
ScreenToClient
ClientToScreen
DispatchMessageA
GetCursorPos
GetAsyncKeyState
EnableWindow
SendDlgItemMessageA
IsDlgButtonChecked
EndDialog
SetWindowTextA
SendMessageA
EnableMenuItem
KillTimer
SetCursor
GetWindowTextA
GetDlgItem
CheckDlgButton
GetDlgItemTextA
GetParent
CheckRadioButton
CharNextA
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
CreateWindowExA
ShowWindow
UpdateWindow
SetFocus
PeekMessageA
TranslateAcceleratorA
TranslateMessage
SetCursorPos
GetMessageA
PostQuitMessage
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
ChildWindowFromPoint
GetDlgCtrlID
GetWindowRect
SetMenuItemInfoA
SetForegroundWindow
DialogBoxParamA
MessageBoxA
GetSystemMetrics
SetRect
GetWindowLongA
AdjustWindowRectEx
SetWindowLongA
SetMenu
SetWindowPos
GetMenu
SetTimer
GetMenuItemCount
DeleteMenu
AppendMenuA
DrawMenuBar
GetSubMenu
CheckMenuRadioItem
GetClientRect
GetDC
ReleaseDC
GetForegroundWindow

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
BitBlt
RealizePalette
GetStockObject
SetDIBColorTable
AnimatePalette
SetPaletteEntries
SelectPalette
DeleteObject
StretchBlt
SelectObject
CreatePalette

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA

shlwapi

PathAddBackslashA
PathRemoveFileSpecA
PathUnquoteSpacesA
PathFindFileNameA
PathRemoveExtensionA
StrChrA

shell32

DragFinish
DragQueryFileA
DragAcceptFiles
SHBrowseForFolderA
DragQueryPoint
SHGetPathFromIDListA
SHGetMalloc

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

comctl32

ord17

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ddraw

DirectDrawEnumerateA
DirectDrawCreate

dsound

ord1

dinput

DirectInputCreateA

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1468f8107aa7a36d4a20be321aafc42

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

shell32

winmm

comctl32

comdlg32

ddraw

dsound

dinput

Sections

.text Size: 280KB - Virtual size: 279KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 24KB - Virtual size: 63KB

.rsrc Size: 20KB - Virtual size: 57KB

.text
Size: 280KB - Virtual size: 279KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 24KB - Virtual size: 63KB

.rsrc
Size: 20KB - Virtual size: 57KB