269a6429c4b8be24000d87ec342e0cab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

269a6429c4b8be24000d87ec342e0cab_JaffaCakes118
Size

45KB
MD5

269a6429c4b8be24000d87ec342e0cab
SHA1

0e8280a4e767ed5571596483d33981516d2f40c8
SHA256

e99cd3777dd5cbc9cdb4054f5ba46d5a07e42f687fdd8e567c7455041066d849
SHA512

95fa5b9c285cd8b0a480019f548a4331e472aacde0b0cfefee899a3fd1401c1c48e211f58d6d1da3a96a952e85fcb63878ca25dfced5f08d98ea9ae731a28e94
SSDEEP

768:Fu1svLqoHDQw3JbQe2eXEM3uvgM3LuB9KLPEB0UjHR4FgFLO164:YavZ3W0XEM3uYM3CB9KwB0QR4cLOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269a6429c4b8be24000d87ec342e0cab_JaffaCakes118

Files

269a6429c4b8be24000d87ec342e0cab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec21728e3fa9aa1889bbb20d67d85c9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetModuleFileNameA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcatA
GetTempPathA
GetCommandLineA
GetSystemDirectoryA
lstrcmpA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
IsBadStringPtrA
GetShortPathNameA
CopyFileA
GetVersionExA
CreateProcessA
GetLastError
CopyFileW
MoveFileW
lstrcatW
lstrcpyW
GetProcAddress
LoadLibraryA
GetSystemDirectoryW
WaitForSingleObject
CreateMutexA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
IsBadWritePtr
WriteFile
Sleep
GetVolumeInformationA
CloseHandle
CreateFileA
DeviceIoControl
GetEnvironmentVariableA

user32

wsprintfA
LoadIconA
SetWindowPos
MessageBoxA
SetTimer
DispatchMessageA
TranslateMessage
IsWindow
IsDialogMessageA
GetMessageA
ShowWindow
CreateDialogParamA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey

shell32

ShellExecuteExA
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA
SHChangeNotify

ole32

CoCreateInstance
CoInitialize

oleaut32

SysAllocString

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

PathGetDriveNumberA

msvcrt

__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
_initterm
free
_except_handler3
strstr
atoi
strncat
__CxxFrameHandler
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
strncpy
sprintf
_strdup

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec21728e3fa9aa1889bbb20d67d85c9d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcp60

shlwapi

msvcrt

wininet

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 25KB - Virtual size: 24KB