478f1495f262956b2cccc93f017db461_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

478f1495f262956b2cccc93f017db461_JaffaCakes118
Size

267KB
MD5

478f1495f262956b2cccc93f017db461
SHA1

e8a8b9eef5e0d6bed37d9d8b52a2c921125a86a4
SHA256

db315ae6de7676a67f88c5eb07e13bfbc17efb0bc9c2190f3c3ed3a983f11ab6
SHA512

f48a77463b5a57766340312a48ddd7ba8d92619204e63ac796394b7d94bdf4d66d93a658b143f205253c07df099e8c7c952e806d73aa3de9bf993489e1cf4444
SSDEEP

6144:pvvFxM5vBNa3w2OJqLc73pkze1dBwuyjCiTHVU1:hvgd2OwI1deBTi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478f1495f262956b2cccc93f017db461_JaffaCakes118

Files

478f1495f262956b2cccc93f017db461_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a71507a2412b6a7746c22cd288b4b348

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
_stricmp
sprintf
strcmp
strncmp
strncpy
longjmp
_setjmp3
fseek
ftell
fread
memcpy
memmove
fabs
ceil
malloc
floor
free
fclose
strlen
exit
__p__iob
fprintf
getenv
sscanf
fmod
sin
cos
abs

kernel32

GetModuleHandleA
HeapCreate
GetTickCount
Sleep
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetTempPathA
WriteFile
DeleteFileA
CreateEventA
WaitForSingleObject
GetVolumeInformationA
GetVersionExA
SetErrorMode
SetEvent
GetLastError
GetLocaleInfoA
GetProcessHeap
GetModuleFileNameA
CopyFileA
GetStartupInfoA
GetEnvironmentVariableA
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetCommandLineA
FreeLibrary
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsGetValue
LoadLibraryA
GetProcAddress
HeapReAlloc
DeleteCriticalSection
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
ReleaseSemaphore

user32

GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetSystemMetrics
GetActiveWindow
GetWindowRect
CreateWindowExA
SetPropA
ShowWindow
CreateAcceleratorTableA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
GetPropA
SetFocus
GetFocus
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
DefWindowProcA
IsWindowEnabled
IsWindowVisible
IsChild
GetClassNameA
CallWindowProcA
SetWindowLongA
CharLowerA
DestroyIcon
CopyImage
GetIconInfo
DrawIconEx

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
SetStretchBltMode
SetBrushOrgEx
StretchBlt
CreateDIBSection
GetDIBits
CreateBitmap
SetPixel
GetTextExtentPoint32A
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext

comctl32

InitCommonControlsEx

ole32

RevokeDragDrop

shfolder

SHGetFolderPathA

Sections

.code
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a71507a2412b6a7746c22cd288b4b348

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

comctl32

ole32

shfolder

Sections

.code Size: 168KB - Virtual size: 168KB

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 1KB

.code
Size: 168KB - Virtual size: 168KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 1KB