341cb0495e77dbaa6f155fa04c36bf2e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

341cb0495e77dbaa6f155fa04c36bf2e_JaffaCakes118
Size

194KB
MD5

341cb0495e77dbaa6f155fa04c36bf2e
SHA1

2cf027c878d05be1d5d6c229a46eadc231e7f0b3
SHA256

085cc8ffc549c21bdba5a8d97acd80257a49aa2b7910a84843c01e3a8fe0e083
SHA512

c45f15849357f154f9cab1923b31c31cd2016c78e5c86af63d77a990af7a781a298c4c14e00d1414e7a09b5b9f9b493d6236eb94bcfa7141e4e1e9430c484a57
SSDEEP

3072:9GW2m4M8CN3jd1AhnNz4i3u9w0HLqHArnoR15bwNi8rhrJvlP/:9GU4MrZjdqhnNz76FOHAQLbw7rhj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
341cb0495e77dbaa6f155fa04c36bf2e_JaffaCakes118

Files

341cb0495e77dbaa6f155fa04c36bf2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateDirectoryA
lstrcpynA
SetLastError
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
MoveFileA
lstrcmpiA
FlushFileBuffers
WriteFile
SetEndOfFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
DeleteFileA
SetFileAttributesA
FileTimeToSystemTime
FindClose
FindFirstFileA
GetLocalTime
lstrcatA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
Sleep
IsBadReadPtr
CreateProcessA
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
CreateMutexA
GetCommandLineA
lstrlenW
MultiByteToWideChar
LoadLibraryExA
IsDBCSLeadByte
RemoveDirectoryA
FindNextFileA
ResumeThread
SuspendThread
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
GetStartupInfoA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
CopyFileA
LocalFree
IsBadCodePtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
GetFileType
GetSystemTimeAsFileTime
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
lstrlenA
GetVersionExA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
lstrcpyA
FreeLibrary
ReadFile
CreateFileA
GetFileSize
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
RaiseException

user32

ModifyMenuA
DestroyMenu
SetWindowLongA
GetWindowLongA
SetTimer
KillTimer
DestroyWindow
IsDialogMessageA
SetWindowPos
SendMessageA
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
MessageBoxA
IsWindow
EndDialog
LoadImageA
GetSystemMetrics
DialogBoxParamA
DestroyIcon
GetSubMenu
LoadIconA
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetActiveWindow
ShowWindow
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
CreateDialogParamA
DefWindowProcA
CharNextA
CharUpperA
PostQuitMessage
LoadMenuA
wsprintfA
UnregisterClassA
MapWindowPoints

advapi32

RegCloseKey
RegOpenKeyExA
OpenProcessToken
GetTokenInformation
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteExA
Shell_NotifyIconA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoInitializeSecurity
CoCreateGuid
OleRun
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
VarBstrCat
SafeArrayDestroy
SafeArrayGetElement

shlwapi

PathFileExistsA
PathRemoveFileSpecA
PathSkipRootA

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate

wininet

HttpSendRequestExA
HttpEndRequestA
InternetSetCookieA
InternetWriteFile
HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetConnectA
InternetAttemptConnect
InternetCloseHandle
InternetCrackUrlA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

rpcrt4

wininet

version

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 16KB - Virtual size: 14KB