2be405bc80636cdfd5a0100cff8f10f0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2be405bc80636cdfd5a0100cff8f10f0_JaffaCakes118
Size

124KB
MD5

2be405bc80636cdfd5a0100cff8f10f0
SHA1

f4b865af205834bdc22f7867ce740c4a2aab5643
SHA256

8a8e214e1616d41eea097d2405d84e83b1c2a0c022ab94ab6a5c249725823d77
SHA512

a1ecfbf64f858155c6ff6e1120f5ff735c5f8741275c153b46a04dbdf1032417da60d49b508ad55ee52e1a27733d08a2eaf015827e04c3fea42808807292a776
SSDEEP

3072:F8A4tav6zZ2JgugSIlXrwkY1CWuFqkgMDnzqL:FAavhyuOI1/0N7zS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be405bc80636cdfd5a0100cff8f10f0_JaffaCakes118

Files

2be405bc80636cdfd5a0100cff8f10f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fa2abe8bb5547ea9ef06c7ed890c5d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
Sleep
SetFileAttributesA
GetFileAttributesA
GetTempPathA
GetCommandLineA
SetFilePointer
ExitProcess
GetTempFileNameA
MultiByteToWideChar
CompareFileTime
CopyFileA
CreateFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
WaitForSingleObject
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GlobalFree
GetFileTime
GetDiskFreeSpaceA
DeleteFileA
GlobalAlloc
CloseHandle
SetFileTime
CreateThread
CreateProcessA
CreateDirectoryA
GetModuleFileNameA
GetModuleHandleA

user32

GetParent
GetDlgItemTextA
LoadBitmapA
SendDlgItemMessageA
IsWindowVisible
SetFocus
SetClassLongA
DestroyWindow
SetWindowTextA
CreateDialogParamA
GetDlgItem
GetWindowRect
GetAsyncKeyState
IsDlgButtonChecked
EnableWindow
IsWindowEnabled
GetDesktopWindow
ShowWindow
SetForegroundWindow
wsprintfA
MessageBoxA
InvalidateRect
UpdateWindow
PeekMessageA
DispatchMessageA
FindWindowA
SendMessageA
SetDlgItemTextA
LoadIconA
ScreenToClient
SetWindowPos
DialogBoxParamA
EndDialog

gdi32

SelectObject
GetTextMetricsA
GetStockObject
TextOutA
GetNearestColor
SetTextColor
SetBkColor
BitBlt
DeleteObject
CreateCompatibleDC

advapi32

RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHFileOperationA

ole32

OleInitialize
CoCreateInstance
CoInitialize
OleUninitialize

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fa2abe8bb5547ea9ef06c7ed890c5d1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 5KB - Virtual size: 4KB