32a94ba3ca1d26039e4289f41efd747e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32a94ba3ca1d26039e4289f41efd747e_JaffaCakes118
Size

794KB
MD5

32a94ba3ca1d26039e4289f41efd747e
SHA1

a405b632bbdc079e18e5165ee73c3fab9d17ec5d
SHA256

b3b222da3bd3897d91a58d92efbb061deaffd3d8a3504bb4e1c36dded6f6ba4b
SHA512

d264e7ebd4aa18fa37f8c7d591ed39f750d50c38f4edd8c723c4a2fa054c55e0554b1734b1a68c480ad1d42290b9be9b5979d52e4da0d73b1e477c56134bce90
SSDEEP

24576:MT2Q5mqEZBCin+co/3BkdOzjcjpp7SQCTXucaIl90:FQLEJ4uw/cjppjCr/n90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32a94ba3ca1d26039e4289f41efd747e_JaffaCakes118

Files

32a94ba3ca1d26039e4289f41efd747e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59d111afcaebb64d80e7c4101b80a334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\et

Imports

user32

CreateWindowExA
DestroyWindow
RegisterClassExA
CallMsgFilterA
RegisterClassA
ShowWindow
DefWindowProcA
MessageBoxA
EnumThreadWindows

wininet

InternetAlgIdToStringA
HttpQueryInfoW
InternetSetFilePointer
FindNextUrlCacheEntryW
InternetLockRequestFile
InternetConnectA
InternetCreateUrlW
InternetErrorDlg
UnlockUrlCacheEntryFileA

kernel32

IsBadWritePtr
UnhandledExceptionFilter
HeapFree
UnlockFile
IsValidCodePage
ReadFile
SetLastError
GetCommandLineA
WideCharToMultiByte
TlsGetValue
GetUserDefaultLCID
GetCurrentThread
GetModuleFileNameW
GetUserDefaultLangID
GetLocaleInfoW
VirtualFree
GetEnvironmentStringsW
GetStartupInfoW
GetModuleFileNameA
LCMapStringA
GetLocaleInfoA
HeapDestroy
CompareStringW
EnumSystemLocalesA
GetStringTypeW
VirtualAlloc
LocalUnlock
InitializeCriticalSection
SetHandleCount
LCMapStringW
ExitProcess
WriteFile
TlsSetValue
LeaveCriticalSection
GetProfileIntA
GetEnvironmentStrings
HeapSize
GetTimeZoneInformation
MultiByteToWideChar
GetStartupInfoA
FlushFileBuffers
TerminateProcess
SetStdHandle
CompareStringA
GetDateFormatA
DeleteCriticalSection
GetCurrentThreadId
SetEnvironmentVariableA
HeapCreate
GetDriveTypeA
VirtualQuery
GetTimeFormatA
InterlockedExchange
GetModuleHandleA
GetStdHandle
GetNamedPipeHandleStateA
GetCPInfo
SetFilePointer
GetStringTypeA
GetFileType
HeapReAlloc
GetSystemInfo
RtlUnwind
OpenMutexA
TlsAlloc
GetVersionExA
GetSystemTimeAsFileTime
CloseHandle
GetACP
TlsFree
GetProcAddress
IsValidLocale
GetTempFileNameW
GetCommandLineW
GetLastError
GetOEMCP
EnterCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
lstrcat
GetCurrentProcessId
HeapAlloc
QueryPerformanceCounter
CreateMutexA
GetTickCount
LoadLibraryA
VirtualProtect
FreeEnvironmentStringsA

comctl32

ImageList_DragMove
InitCommonControlsEx

comdlg32

ChooseFontW
PrintDlgA
FindTextA

gdi32

CreatePolyPolygonRgn
EndDoc
GetObjectType
GetCharABCWidthsA
ArcTo
GetRandomRgn
ResetDCW
GetMapMode
StartPage
SetBkColor
GetPolyFillMode
CreateRectRgnIndirect
GetSystemPaletteUse
SetPaletteEntries
SetBkMode
EnumFontFamiliesExA
GetBkMode
GetTextColor
EnumFontFamiliesExW
CreateCompatibleDC
ScaleWindowExtEx
Arc

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59d111afcaebb64d80e7c4101b80a334

Headers

File Characteristics

PDB Paths

Imports

user32

wininet

kernel32

comctl32

comdlg32

gdi32

Sections

.text Size: 639KB - Virtual size: 638KB

.rdata Size: 30KB - Virtual size: 45KB

.data Size: 112KB - Virtual size: 111KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 639KB - Virtual size: 638KB

.rdata
Size: 30KB - Virtual size: 45KB

.data
Size: 112KB - Virtual size: 111KB

.rsrc
Size: 11KB - Virtual size: 11KB