3ad4641471d2963f6f386142c61261ce_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3ad4641471d2963f6f386142c61261ce_JaffaCakes118
Size

164KB
MD5

3ad4641471d2963f6f386142c61261ce
SHA1

2690430e03b4404b073b1936437aecf71e8510cf
SHA256

494b23a589fda128d759d1c07f80a5527ae358bade23b9723fc6deaff9990d31
SHA512

aefd40fd36e9132132a455091a4eb85fcfd31b91584abf80c66d6d2969494e26ddb9410351e3fbab7811f5c116a2dacec63076a2668847b46809faff1da0912c
SSDEEP

3072:mvZgiywgptbLi17nYerYen5f1Kb+Ur9iVKcI1v2SNvGMXHJZ276Whfl7OYPU:qZhK7yn/rDnWbNjpVNJsDhfkY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad4641471d2963f6f386142c61261ce_JaffaCakes118

Files

3ad4641471d2963f6f386142c61261ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

903ee506b61fd241c743cb8a2a6a8596

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
GetKeyState
CharNextA
MessageBoxA
wsprintfW
wsprintfA
CharLowerA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

kernel32

DeleteCriticalSection
GetTempPathW
UnmapViewOfFile
MultiByteToWideChar
GetEnvironmentVariableA
GetStringTypeW
RtlUnwind
GetPriorityClass
GetCPInfo
CreateFileW
LeaveCriticalSection
SetUnhandledExceptionFilter
CreateMutexA
CreateFileMappingA
SetLastError
GlobalFree
GetThreadIOPendingFlag
TlsAlloc
WideCharToMultiByte
GetStdHandle
RaiseException
FileTimeToLocalFileTime
GetCurrentThreadId
TransmitCommChar
ExitThread
GetTempPathA
GetFileType
InterlockedIncrement
FlushFileBuffers
WritePrivateProfileStringA
ReleaseSemaphore
GetCurrentProcess
SetEvent
LoadLibraryW
TerminateProcess
lstrcmpA
WaitForSingleObject
MapViewOfFile
GetCommandLineA
CompareStringA
GetStringTypeA
GlobalUnlock
WriteFile
HeapAlloc
TlsSetValue
GetSystemTime
FreeEnvironmentStringsA
EnterCriticalSection
GetFullPathNameW
CompareStringW
LCMapStringW
HeapCreate
Sleep
GetTempFileNameA
CloseHandle
EnumResourceNamesW
GetDiskFreeSpaceExA
SetStdHandle
FreeEnvironmentStringsW
TlsFree
CreateThread
GetOEMCP
lstrcmpW
GetLastError
GetModuleHandleA
GetACP
HeapDestroy
IsDBCSLeadByte
UnhandledExceptionFilter
ExitProcess
GetThreadPriority
HeapFree
GetModuleFileNameA
lstrcpyA
InterlockedExchange
GetTickCount
ExitProcess
FreeLibrary
IsBadCodePtr
GetTimeZoneInformation
IsBadWritePtr
SetPriorityClass
GetPrivateProfileStringA
GetStartupInfoA
TlsGetValue
HeapReAlloc
InterlockedDecrement
ResetEvent
GlobalAlloc
FileTimeToSystemTime
OutputDebugStringA
GetProcAddress
SetHandleCount
IsBadReadPtr
GetEnvironmentStringsW
CreateSemaphoreA
SetEndOfFile
HeapSize
InitializeCriticalSection
GetEnvironmentStrings
GetFullPathNameA
LCMapStringA
GetUserDefaultLCID
LoadLibraryA
SetEnvironmentVariableA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

903ee506b61fd241c743cb8a2a6a8596

Headers

File Characteristics

Imports

user32

msimg32

shlwapi

kernel32

advapi32

Sections

.text Size: 139KB - Virtual size: 139KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 19KB - Virtual size: 19KB

.crt Size: 512B - Virtual size: 72KB

.text
Size: 139KB - Virtual size: 139KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 19KB - Virtual size: 19KB

.crt
Size: 512B - Virtual size: 72KB