268112e20d24664fe4e81a3a193e3078_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

268112e20d24664fe4e81a3a193e3078_JaffaCakes118
Size

182KB
MD5

268112e20d24664fe4e81a3a193e3078
SHA1

5a24b73b96bed21d62458dd784bb2ec5ca579854
SHA256

147f05ae5750130a61bbc2f92199729d3e914c7c575ecafb6127b52b08f6ee74
SHA512

a4a40691d5860eebfb95fdfca6fbb3407669737dd332b0fef9525f823b19a14d86075bb6470200ab173c4083446cfbb0ad3e6e0c989f6cb2b4eddfc175336700
SSDEEP

3072:+ouHiZoHMBMyj/50/DOUbM3ORagyJ53wYDQBuu0hbqSc6h9tx:+niNB5j/m/DQ3e7yJNXu0huB6h9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268112e20d24664fe4e81a3a193e3078_JaffaCakes118

Files

268112e20d24664fe4e81a3a193e3078_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f9a6dca6d98b38ddeb00505936f992f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
WaitForMultipleObjects
Sleep
EnterCriticalSection
lstrlenA
GetVersionExW
DeleteFileA
LocalFree
FindClose
GetFileAttributesA
lstrlenW
DeleteFileW
GetTempFileNameW
LocalAlloc
InitializeCriticalSection
GetModuleFileNameA
GetThreadLocale
FreeLibrary
InterlockedIncrement
SetFilePointer
WriteFile
CloseHandle
MultiByteToWideChar
CreateMutexA
GetPriorityClass
LeaveCriticalSection
RemoveDirectoryW
CreateDirectoryA
DisableThreadLibraryCalls
DeleteCriticalSection
InterlockedExchange
ReleaseMutex
GetModuleFileNameW
SetFileAttributesW
LoadLibraryW
WideCharToMultiByte
EnumResourceTypesW
GetTickCount
MulDiv
CopyFileA
CreateFileA
ExitProcess
OutputDebugStringA
ReadFile
FindNextFileW
GetLocaleInfoA
QueryPerformanceCounter
SetFileAttributesA
GetCurrentThreadId
CreateDirectoryW
GetTempFileNameA
GetACP
GetLastError
GetVersionExA
GetSystemTime
GetTempPathA
WaitForSingleObject
InterlockedDecrement
GetTempPathW
OutputDebugStringW
FindFirstFileW
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

DispatchMessageW
FillRect
TranslateMessage
GetClientRect
SetRectEmpty
PeekMessageW
wsprintfW
GetDC
ReleaseDC
OffsetRect
IsRectEmpty
CopyRect
GetWindowRect

shell32

SHGetSpecialFolderPathA

winmm

timeGetTime

shlwapi

PathAppendW
PathCombineW
PathRenameExtensionW
PathAddBackslashW
PathRemoveBackslashW
PathFileExistsA
PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW

gdi32

SelectObject
CreateBitmap
CreateDIBSection
DeleteObject
GetDIBits
GetObjectType
SetBrushOrgEx
CreateCompatibleBitmap
GetObjectW
StretchBlt
DeleteDC
CreateSolidBrush
CreateDCW
BitBlt
SetBkColor
CreateCompatibleDC
SetStretchBltMode

ole32

CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitialize

advapi32

RegEnumKeyExW
RegCreateKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW
RegSetValueExA
RegDeleteKeyA

avifil32

AVISaveOptions
AVIMakeCompressedStream

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f9a6dca6d98b38ddeb00505936f992f

Headers

File Characteristics

Imports

kernel32

user32

shell32

winmm

shlwapi

gdi32

ole32

advapi32

avifil32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 73KB - Virtual size: 73KB

.tls Size: 1024B - Virtual size: 124KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 73KB - Virtual size: 73KB

.tls
Size: 1024B - Virtual size: 124KB