4205c39827c16da0a20be2def97f3081_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4205c39827c16da0a20be2def97f3081_JaffaCakes118
Size

167KB
MD5

4205c39827c16da0a20be2def97f3081
SHA1

0dbae3124fc50a8fe953abc52249aa6cc9062569
SHA256

eb025010945d5733713497f9baee89e9a15a66b0a1088d266492103b90166cf7
SHA512

850b29547addb5de4f56f0df0bf5e9573842aafbaf050080ad4f1e12859d9426c51d1fab18f73ac7631a0b2b3877e963bca6716304866e22e167414b604d5f61
SSDEEP

3072:j7XdyeLiDIG+MrLE69kHpFLw90lfZSeDIRKe0pewIUW1xTBwUQBzbTFr:j7oeLiDIG+MPE6c2Qz0RKTYv1qdRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4205c39827c16da0a20be2def97f3081_JaffaCakes118

Files

4205c39827c16da0a20be2def97f3081_JaffaCakes118
.exe windows:4 windows x86 arch:x86

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
TlsGetValue
GetFullPathNameA
GetOEMCP
GetThreadIOPendingFlag
HeapCreate
EnterCriticalSection
MultiByteToWideChar
GetStringTypeW
CloseHandle
IsBadCodePtr
GetFullPathNameW
FreeLibrary
ResetEvent
GlobalAlloc
GetSystemTime
lstrcmpW
GetCPInfo
GetEnvironmentStringsW
TlsAlloc
GetFileType
GetStartupInfoA
SetPriorityClass
InterlockedIncrement
HeapAlloc
ReleaseSemaphore
GetPriorityClass
UnmapViewOfFile
SetEvent
LeaveCriticalSection
lstrcpyA
IsBadReadPtr
FileTimeToSystemTime
CompareStringA
GetACP
LoadLibraryA
CreateThread
HeapSize
CreateMutexA
TransmitCommChar
GlobalUnlock
DeleteCriticalSection
GetPrivateProfileStringA
lstrcmpA
ExitThread
ExitProcess
RaiseException
FlushFileBuffers
GetCommandLineA
InterlockedExchange
LCMapStringW
GetEnvironmentStrings
CreateFileW
Sleep
SetStdHandle
CreateFileMappingA
GetStdHandle
LCMapStringA
GetModuleHandleA
EnumResourceNamesW
IsBadWritePtr
MapViewOfFile
ExitProcess
GetTempPathA
InterlockedDecrement
GetEnvironmentVariableA
FreeEnvironmentStringsW
CreateSemaphoreA
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
TlsSetValue
WriteFile
WaitForSingleObject
GetUserDefaultLCID
GetDiskFreeSpaceExA
SetEndOfFile
LoadLibraryW
UnhandledExceptionFilter
CompareStringW
GlobalFree
GetProcAddress
SetHandleCount
GetLastError
FileTimeToLocalFileTime
WritePrivateProfileStringA
TlsFree
HeapFree
GetCurrentThreadId
IsDBCSLeadByte
GetTempFileNameA
SetLastError
GetThreadPriority
HeapDestroy
GetStringTypeA
OutputDebugStringA
GetTimeZoneInformation
InitializeCriticalSection
GetCurrentProcess
GetTickCount
RtlUnwind
GetTempPathW
HeapReAlloc
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

user32

CharUpperA
CharNextA
MessageBoxA
wsprintfW
GetKeyState
wsprintfA
CharLowerA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

deb4192e1b6aafb05c55a891947175bf

Headers

File Characteristics

Imports

kernel32

msimg32

shlwapi

advapi32

user32

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.crt Size: 512B - Virtual size: 68KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.crt
Size: 512B - Virtual size: 68KB