3af669ea67611f0e9fd86995180ff693_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3af669ea67611f0e9fd86995180ff693_JaffaCakes118
Size

207KB
MD5

3af669ea67611f0e9fd86995180ff693
SHA1

d9cf4cac806e2aca4073f1e06452b6ffc24c0fd5
SHA256

34e01f9e7e660c28fc2229b9d0d545720e1a60e6c522c8625aac2a188b445534
SHA512

e98ea7dba7759e14193e17881508265ecf3dc5bac9363e1670142ec1e51c4a58458f1926db115e86e439adda0c081ae4024dd8ab71d2f6cf53945c2310a49f73
SSDEEP

3072:cCp92OF9j48oGabSYZyG892cfyu1B9MOG7uiVBEjkdYlvgXiTaBHXO/CE0wXg47u:cCpB3M8oHK5KuFi7uiVBjdYlYnUf04u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af669ea67611f0e9fd86995180ff693_JaffaCakes118

Files

3af669ea67611f0e9fd86995180ff693_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fbdfb02498af1391159bc42142b6dce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
CreateEventW
ReadDirectoryChangesW
GetCalendarInfoW
CreateMutexW
GetFullPathNameW
GetProcAddress
GetWindowsDirectoryW
LoadLibraryA
GetWindowsDirectoryA
CreatePipe
GetThreadLocale

user32

GetCapture
CreateWindowExA
GetDlgItemTextA
MessageBoxA
GetFocus
LoadIconW
GetTopWindow
LoadCursorW
WinHelpA
AdjustWindowRect
keybd_event
GetDlgItemInt
LoadBitmapW
wvsprintfW
DefDlgProcW
InsertMenuW
CallWindowProcA
GetIconInfo
LoadBitmapA
LoadMenuW
GetDlgItem
MonitorFromPoint
IsIconic
GetSysColor
DrawTextA
CharLowerA

gdi32

CreateDCW
GetFontUnicodeRanges
EnumFontFamiliesExW
ExtCreateRegion
SaveDC
GetDeviceGammaRamp
GetObjectW
CreateDIBPatternBrushPt

advapi32

RegEnumValueA
RegOpenKeyA
RegReplaceKeyW
RegDeleteKeyA
RegReplaceKeyA
RegCreateKeyExW
RegQueryValueA
RegDeleteValueA
RegFlushKey
RegDeleteKeyW
RegOpenKeyW

shlwapi

AssocQueryStringByKeyW
PathCreateFromUrlW
PathIsSystemFolderW
PathAppendW
SHQueryInfoKeyA
SHSetValueA
StrStrW
PathFindNextComponentA
PathMatchSpecW
StrRetToStrA

comdlg32

ReplaceTextA
PrintDlgA

opengl32

glColor4bv
glColor3us
glPixelMapfv

urlmon

IsAsyncMoniker
FindMediaType

Sections

.HHVk
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dkPX
Size: 1024B - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GYaPFd
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mZyNvD
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HAVm
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kQ
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 117KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ujp
Size: 1024B - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fbdfb02498af1391159bc42142b6dce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comdlg32

opengl32

urlmon

Sections

.HHVk Size: 2KB - Virtual size: 2KB

.dkPX Size: 1024B - Virtual size: 189KB

.GYaPFd Size: 13KB - Virtual size: 13KB

.mZyNvD Size: 2KB - Virtual size: 43KB

.HAVm Size: 4KB - Virtual size: 33KB

.kQ Size: 2KB - Virtual size: 49KB

.data Size: 117KB - Virtual size: 423KB

.Ujp Size: 1024B - Virtual size: 368KB

.rsrc Size: 61KB - Virtual size: 61KB

.reloc Size: 1024B - Virtual size: 1008B

.HHVk
Size: 2KB - Virtual size: 2KB

.dkPX
Size: 1024B - Virtual size: 189KB

.GYaPFd
Size: 13KB - Virtual size: 13KB

.mZyNvD
Size: 2KB - Virtual size: 43KB

.HAVm
Size: 4KB - Virtual size: 33KB

.kQ
Size: 2KB - Virtual size: 49KB

.data
Size: 117KB - Virtual size: 423KB

.Ujp
Size: 1024B - Virtual size: 368KB

.rsrc
Size: 61KB - Virtual size: 61KB

.reloc
Size: 1024B - Virtual size: 1008B