316333c56d5fbb86b102529890b45dab_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

316333c56d5fbb86b102529890b45dab_JaffaCakes118
Size

186KB
MD5

316333c56d5fbb86b102529890b45dab
SHA1

adc1d0f7a1a93e1c64974a06c5203b44d2706832
SHA256

46057923167be837060ac0f10f3713026b4a449b74576f0612ca2225b335cc91
SHA512

97a99f7a34bcc373da249d2b0d3358c7fae8ca860fb100222ef50c59a3ff2db7936a4e85b379ea1bacebd333294989400a3f02914401223a71718d1f8d20709c
SSDEEP

3072:tzOQsFDni/byyff9PPHe2RWcOgHsbRofKS/l0Ijl9w4bXu8x:cnoby8fxRdstofKSeILw4blx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316333c56d5fbb86b102529890b45dab_JaffaCakes118

Files

316333c56d5fbb86b102529890b45dab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0397b925de67553611604afe70dfbd54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
SetProcessWorkingSetSize
GetCurrentProcess
lstrlenA
GetCurrentThreadId
GetModuleFileNameA
GetCommandLineA
WideCharToMultiByte
GetSystemDefaultLCID
lstrlenW
ExitProcess
SleepEx
LockResource
FreeLibrary
LoadLibraryA
ReleaseSemaphore
CloseHandle
WaitForSingleObject
CreateThread
CreateSemaphoreA
HeapCreate
GetProcAddress
GetLastError
WriteProcessMemory
OpenProcess
GetCurrentProcessId
GetVolumeInformationA
ReadFile
CreateFileA
EnumResourceNamesA
CompareStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetSystemInfo
LoadResource
FlushFileBuffers
SetStdHandle
SetFilePointer
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetFullPathNameA
HeapSize
TerminateProcess
IsBadWritePtr
HeapDestroy
VirtualQuery
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapReAlloc
GetStartupInfoA
FindResourceA
CompareStringW
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
GetVersionExA
GetThreadLocale
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEnvironmentVariableA
FindClose
RtlUnwind
HeapAlloc
GetProcessHeap
HeapFree
IsBadReadPtr
VirtualFree
VirtualProtect
VirtualAlloc
GetLocaleInfoA
GetACP
GetTimeZoneInformation
InterlockedExchange

user32

CreateWindowExA
IsWindow
MessageBoxA
PostQuitMessage
PostMessageA
GetMessageA
TranslateMessage
PostThreadMessageA
RegisterWindowMessageA
LoadStringA
SendMessageA
ShowWindow
SetWindowTextW
DispatchMessageA
SetFocus
MessageBoxW
LoadImageA
LoadIconA
EnableWindow
GetSystemMetrics
SetClassLongA
SetWindowTextA
FindWindowA
SetForegroundWindow
CallNextHookEx
GetClassNameA

ole32

CoInitialize
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

SafeArrayCreate
SysAllocStringLen
SafeArrayDestroy
SafeArrayRedim
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocString
VariantCopy
SafeArrayCopy
SysFreeString
VariantInit
VariantClear
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SysStringByteLen
SysAllocStringByteLen
VariantChangeType

shlwapi

StrStrIA
StrCmpIW

comctl32

ord410
ord413
ord412

psapi

GetModuleBaseNameA

ws2_32

WSAStartup

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0397b925de67553611604afe70dfbd54

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

shlwapi

comctl32

psapi

ws2_32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 2KB - Virtual size: 9KB

.rsrc Size: 43KB - Virtual size: 42KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 2KB - Virtual size: 9KB

.rsrc
Size: 43KB - Virtual size: 42KB