24fb950a1447624437666f7cccdadf6b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

24fb950a1447624437666f7cccdadf6b_JaffaCakes118
Size

257KB
MD5

24fb950a1447624437666f7cccdadf6b
SHA1

8e2c337a3d8e3da93d23a24741a93c26d032cff2
SHA256

dd488462d8cfc1e058bccc758022616e372957a0d9f921f3f7cd2eb89e6f15f1
SHA512

888de935b15b139ef4bd0495988f1e623c496e184d1792a3470bb3c436187a241ea9330050790da5952888f81a3fe8257222783c58929bb3f20c972d61f28b0b
SSDEEP

6144:51Co6nZJbHLtERqwV3wZK2x7sLK1uTtvoyc2Yt:5CXbHLDwV3wZV7sLKqtQn2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24fb950a1447624437666f7cccdadf6b_JaffaCakes118

Files

24fb950a1447624437666f7cccdadf6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
FreeLibrary
GetTimeFormatW
WaitForSingleObject
SystemTimeToFileTime
GetDateFormatW
lstrcpynW
GetModuleHandleW
lstrlenW
lstrlenA
SetErrorMode
CreateDirectoryW
GetSystemDirectoryW
FileTimeToSystemTime
GetWindowsDirectoryW
LocalFree
GetTempPathW
LocalAlloc
RemoveDirectoryW
OpenEventW
SetUnhandledExceptionFilter
IsDebuggerPresent
ExpandEnvironmentStringsA
CreateEventW
lstrcmpW
CompareFileTime
lstrcmpiW
FindResourceW
LoadResource
GetCurrentThreadId
LoadLibraryA
GetProcAddress

user32

GetFocus
EnableMenuItem
DestroyIcon
LoadCursorW
GetSysColor
GetSubMenu
RemoveMenu
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
GetMenuItemCount
AppendMenuW
LoadBitmapW
SetWindowPos
GetDesktopWindow
CopyRect
GetMenuItemInfoW
FindWindowW
EnableWindow
SendMessageW
GetSystemMetrics
IsWindow
SetTimer
InvalidateRect
GetCursorPos
RegisterWindowMessageW
GetForegroundWindow

gdi32

CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreateDIBSection
CreateHatchBrush
CreateRectRgn
DeleteObject
CreatePatternBrush
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

wininet

HttpQueryInfoW
InternetCloseHandle
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetAttemptConnect
InternetReadFile

shell32

ShellExecuteW

comctl32

ImageList_GetIconSize

quartz

AMGetErrorTextW
DBToAmpFactor

cic

DllUnregisterServer

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itfHg
Size: 3KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUmTd
Size: 512B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bpg
Size: 4KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cX
Size: 3KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qaI
Size: 1KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cLEXDA
Size: 75KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bMpgq
Size: 1024B - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cTzOE
Size: 139KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Abr
Size: 512B - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

shell32

comctl32

quartz

cic

Sections

.text Size: 15KB - Virtual size: 15KB

.itfHg Size: 3KB - Virtual size: 542KB

.RUmTd Size: 512B - Virtual size: 37KB

.Bpg Size: 4KB - Virtual size: 170KB

.rdata Size: 3KB - Virtual size: 46KB

.cX Size: 3KB - Virtual size: 385KB

.qaI Size: 1KB - Virtual size: 210KB

.cLEXDA Size: 75KB - Virtual size: 118KB

.bMpgq Size: 1024B - Virtual size: 45KB

.M Size: 1KB - Virtual size: 7KB

.data Size: 6KB - Virtual size: 284KB

.cTzOE Size: 139KB - Virtual size: 193KB

.Abr Size: 512B - Virtual size: 86KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.itfHg
Size: 3KB - Virtual size: 542KB

.RUmTd
Size: 512B - Virtual size: 37KB

.Bpg
Size: 4KB - Virtual size: 170KB

.rdata
Size: 3KB - Virtual size: 46KB

.cX
Size: 3KB - Virtual size: 385KB

.qaI
Size: 1KB - Virtual size: 210KB

.cLEXDA
Size: 75KB - Virtual size: 118KB

.bMpgq
Size: 1024B - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 7KB

.data
Size: 6KB - Virtual size: 284KB

.cTzOE
Size: 139KB - Virtual size: 193KB

.Abr
Size: 512B - Virtual size: 86KB

.rsrc
Size: 1KB - Virtual size: 1KB