3623aac82266af117f6b9bef8460d6e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3623aac82266af117f6b9bef8460d6e5_JaffaCakes118
Size

257KB
MD5

3623aac82266af117f6b9bef8460d6e5
SHA1

3062d2c3ce4ac09463ef7259df6daac9e6c10f7c
SHA256

1100e53619010b22246047fcb7a7fe4a0901e41b270548d8212626b7cc8bff9f
SHA512

910dd3e3f150aa4ea3a63144f21d1668792027792dde2f799f9f47690ba66df6d44c997ce0492de4753c8fcdf6cd138ac30b500fc0aeb9f909e8909c10011ecc
SSDEEP

6144:Z1Co6nZJbHLtERqwV3wZK2x7sLK1uTtvoyc2Yt:ZCXbHLDwV3wZV7sLKqtQn2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3623aac82266af117f6b9bef8460d6e5_JaffaCakes118

Files

3623aac82266af117f6b9bef8460d6e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
FreeLibrary
GetTimeFormatW
WaitForSingleObject
SystemTimeToFileTime
GetDateFormatW
lstrcpynW
GetModuleHandleW
lstrlenW
lstrlenA
SetErrorMode
CreateDirectoryW
GetSystemDirectoryW
FileTimeToSystemTime
GetWindowsDirectoryW
LocalFree
GetTempPathW
LocalAlloc
RemoveDirectoryW
OpenEventW
SetUnhandledExceptionFilter
IsDebuggerPresent
ExpandEnvironmentStringsA
CreateEventW
lstrcmpW
CompareFileTime
lstrcmpiW
FindResourceW
LoadResource
GetCurrentThreadId
LoadLibraryA
GetProcAddress

user32

GetFocus
EnableMenuItem
DestroyIcon
LoadCursorW
GetSysColor
GetSubMenu
RemoveMenu
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
GetMenuItemCount
AppendMenuW
LoadBitmapW
SetWindowPos
GetDesktopWindow
CopyRect
GetMenuItemInfoW
FindWindowW
EnableWindow
SendMessageW
GetSystemMetrics
IsWindow
SetTimer
InvalidateRect
GetCursorPos
RegisterWindowMessageW
GetForegroundWindow

gdi32

CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreateDIBSection
CreateHatchBrush
CreateRectRgn
DeleteObject
CreatePatternBrush
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

wininet

HttpQueryInfoW
InternetCloseHandle
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetAttemptConnect
InternetReadFile

shell32

ShellExecuteW

comctl32

ImageList_GetIconSize

quartz

AMGetErrorTextW
DBToAmpFactor

cic

DllUnregisterServer

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itfHg
Size: 3KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUmTd
Size: 512B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bpg
Size: 4KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cX
Size: 3KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qaI
Size: 1KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cLEXDA
Size: 75KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bMpgq
Size: 1024B - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cTzOE
Size: 139KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Abr
Size: 512B - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

shell32

comctl32

quartz

cic

Sections

.text Size: 15KB - Virtual size: 15KB

.itfHg Size: 3KB - Virtual size: 542KB

.RUmTd Size: 512B - Virtual size: 37KB

.Bpg Size: 4KB - Virtual size: 170KB

.rdata Size: 3KB - Virtual size: 46KB

.cX Size: 3KB - Virtual size: 385KB

.qaI Size: 1KB - Virtual size: 210KB

.cLEXDA Size: 75KB - Virtual size: 118KB

.bMpgq Size: 1024B - Virtual size: 45KB

.M Size: 1KB - Virtual size: 7KB

.data Size: 6KB - Virtual size: 284KB

.cTzOE Size: 139KB - Virtual size: 193KB

.Abr Size: 512B - Virtual size: 86KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.itfHg
Size: 3KB - Virtual size: 542KB

.RUmTd
Size: 512B - Virtual size: 37KB

.Bpg
Size: 4KB - Virtual size: 170KB

.rdata
Size: 3KB - Virtual size: 46KB

.cX
Size: 3KB - Virtual size: 385KB

.qaI
Size: 1KB - Virtual size: 210KB

.cLEXDA
Size: 75KB - Virtual size: 118KB

.bMpgq
Size: 1024B - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 7KB

.data
Size: 6KB - Virtual size: 284KB

.cTzOE
Size: 139KB - Virtual size: 193KB

.Abr
Size: 512B - Virtual size: 86KB

.rsrc
Size: 1KB - Virtual size: 1KB