40f46f76bf7a382b5290127ae4fa0b4f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40f46f76bf7a382b5290127ae4fa0b4f_JaffaCakes118
Size

111KB
MD5

40f46f76bf7a382b5290127ae4fa0b4f
SHA1

38dec55a0b73873a2a5afd9f3b3bcb0132d9ac77
SHA256

d835c38c67b4216616f64302a716db0ebd558b2761e6ad22e53fcf2bc948a7e3
SHA512

edea2b573a2b4517c5d2c600dc795ed851b98f7dd0e52e263406a3ec6dfd762f0a5f225b175d293cd55a0dce62d71a1b9dca83c450d2c71c552f8433fa4436c0
SSDEEP

3072:lb0aT53RlqaW14sLrA7UNl3uyirINMp2M:lb0aFBLW14s4wudr2uh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40f46f76bf7a382b5290127ae4fa0b4f_JaffaCakes118

Files

40f46f76bf7a382b5290127ae4fa0b4f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetDateFormatA
GlobalAddAtomW
InterlockedDecrement
GetProcessVersion
DeviceIoControl
GetProcAddress
lstrcmpW
FormatMessageW
GetPrivateProfileIntW
GetFileAttributesW
WideCharToMultiByte
LocalLock
InterlockedIncrement
CreateDirectoryW
HeapFree
CreateFileW
SetLastError
GetTempPathW
WriteFile
SetFilePointer
GetTimeFormatW
DuplicateHandle
CloseHandle
CopyFileW
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetPrivateProfileSectionW
GetModuleHandleA
GetWindowsDirectoryW
GetFileSize
lstrcmpiW
ReadFile
DnsHostnameToComputerNameA
IsWow64Process
GetFullPathNameW
GlobalWire
GetExitCodeProcess
lstrlenA
BackupRead
GetTempPathA
GetProcessHeap
FreeLibrary
GetSystemDirectoryW
IsValidLocale
LocalAlloc
GetVolumeInformationW
SetThreadPriority
GlobalFree
GetThreadLocale
CreateFileA
IsBadCodePtr
SwitchToThread
lstrlenW
GetTickCount
GetFileTime
HeapAlloc
GetDateFormatW
RaiseException
SetCurrentDirectoryW
GetCurrentProcess
RemoveDirectoryA
WaitNamedPipeW
GetCommandLineW
LocalReAlloc
ReleaseMutex
GetStartupInfoA
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
GetLogicalDriveStringsW
GetPrivateProfileStringW
LocalFree
CreateMutexW

gdi32

GetStockObject

user32

GetWindowDC
IsRectEmpty
GetWindowInfo
SetFocus

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 117KB

.rxdata Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 243KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 117KB

.rxdata
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 243KB