4a7c7dd0d139f4d7964951cd654f2693_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4a7c7dd0d139f4d7964951cd654f2693_JaffaCakes118
Size

804KB
MD5

4a7c7dd0d139f4d7964951cd654f2693
SHA1

4940d277225f67a8f2a6ff32a7c8718bdedf4964
SHA256

861ab2c9f24a030ca2560ea9076fa83143589ea4ddc1ad9ff0625f459f545390
SHA512

1977d81dce3f49e8c8622804ace612dcbc985d186bc1f21a88f822a696f13a0c13420180a842ffa9667fa12e1f253a50e79e4356b7b9980ef0f50205d0d9eb87
SSDEEP

24576:Q3xWepwBGaAH47qTKkjHfhHpYJzFKV7T9c6YZGqJ11g6SgD:QkgecHft9QzFK1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a7c7dd0d139f4d7964951cd654f2693_JaffaCakes118

Files

4a7c7dd0d139f4d7964951cd654f2693_JaffaCakes118
.exe windows:4 windows x86 arch:x86

132c6d99a9eba6691bcc122e3931264f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
CreateDirectoryExA
WritePrivateProfileSectionW
GetCurrentThread
GetThreadLocale
GetAtomNameW
HeapAlloc
EnumSystemLocalesA
IsValidCodePage
MultiByteToWideChar
TlsSetValue
InterlockedDecrement
OpenFileMappingW
GetConsoleMode
GetTimeFormatA
CreateMutexW
GetModuleHandleW
LCMapStringW
WideCharToMultiByte
LCMapStringA
LoadResource
OpenMutexA
GetLocalTime
GetLocaleInfoA
SetEvent
GetCPInfo
ReleaseSemaphore
LoadLibraryA
CreateNamedPipeA
FreeLibrary
WriteProfileSectionA
FreeEnvironmentStringsW
GetProcAddress
EnumResourceTypesW
CompareStringA
HeapCreate
GetCommandLineA
Sleep
GetModuleFileNameA
HeapReAlloc
SetConsoleCtrlHandler
WritePrivateProfileStructW
FreeEnvironmentStringsA
GetStartupInfoW
WaitNamedPipeW
LeaveCriticalSection
TlsFree
GetStringTypeW
VirtualAlloc
SetStdHandle
GetUserDefaultLCID
GetVersionExA
CreateMutexA
SetTimeZoneInformation
CreateFileA
GetModuleHandleA
GetTickCount
IsDebuggerPresent
GetEnvironmentStringsW
SetLastError
GetExitCodeThread
RtlUnwind
HeapSize
SetHandleCount
SetUnhandledExceptionFilter
GetCurrentProcess
UnmapViewOfFile
InitializeCriticalSection
GetCommandLineW
GetLastError
GetNamedPipeHandleStateA
EnterCriticalSection
TlsAlloc
SetThreadLocale
VirtualFree
TlsGetValue
ReadFile
GetConsoleCP
IsValidLocale
LockFile
GetDateFormatA
ExpandEnvironmentStringsW
FindNextFileA
SetWaitableTimer
lstrcatA
FindAtomW
SetEnvironmentVariableA
QueryPerformanceCounter
WriteConsoleW
GetSystemTimeAsFileTime
GetPrivateProfileSectionNamesA
GetStringTypeExA
InterlockedExchange
GetConsoleOutputCP
UnlockFile
HeapFree
GetNamedPipeHandleStateW
SetFilePointer
GetCurrentThreadId
GetProcessHeap
EnumCalendarInfoW
TerminateProcess
InterlockedIncrement
GetProfileIntW
WaitForMultipleObjectsEx
HeapDestroy
RaiseException
UnhandledExceptionFilter
ExitProcess
GetStdHandle
WriteConsoleA
GetACP
GetTimeZoneInformation
GetModuleFileNameW
GetConsoleScreenBufferInfo
GetEnvironmentStrings
WriteFile
GetFileType
GetOEMCP
FlushFileBuffers
CloseHandle
GetProcAddress
GetLocaleInfoW
GetStringTypeA
GetCurrentProcessId
GetStartupInfoA
VirtualQuery
GetFullPathNameA
GetSystemDefaultLangID
DeleteCriticalSection
GetThreadPriority
CompareStringW

user32

MessageBoxA
CharNextA
DestroyCursor
GetMenuStringA
RemovePropW
BeginPaint
CheckRadioButton
SetWindowRgn
GetKeyboardLayoutNameA
EqualRect
OemToCharBuffW
GetClipboardData
SetDlgItemTextW
CreateIconFromResourceEx
GetSysColorBrush
wvsprintfW
GetAsyncKeyState
SetCapture
CallNextHookEx
GetParent
DlgDirSelectExA
DestroyWindow
IsZoomed
RegisterClassExA
DragObject
DlgDirListA
WINNLSEnableIME
SetWindowsHookW
GetKeyboardLayoutList
MessageBoxW
DdeReconnect
CreateDialogIndirectParamW
CharLowerW
GetPriorityClipboardFormat
ToAsciiEx
CharLowerBuffW
ShowWindow
VkKeyScanA
MsgWaitForMultipleObjects
CreateWindowExA
GetClassInfoExA
SetCaretPos
GetUserObjectSecurity
OemKeyScan
DefWindowProcW
PostQuitMessage
SetActiveWindow
RegisterClassA
ShowCursor
AdjustWindowRectEx
EnumDisplaySettingsW
VkKeyScanExA
UnhookWindowsHook
DdePostAdvise
ArrangeIconicWindows
FindWindowExW
ScreenToClient
SendIMEMessageExW
SetWindowsHookExA
EnumChildWindows
ModifyMenuA
DialogBoxParamW
EnumDisplayDevicesW
UnloadKeyboardLayout
PostMessageA
TranslateAccelerator

comctl32

ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_Destroy
GetEffectiveClientRect
CreatePropertySheetPage
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ImageList_Add
CreateToolbar
ImageList_GetIcon
ImageList_GetIconSize
ImageList_SetFlags
ImageList_DragLeave
ImageList_LoadImage
ImageList_DragMove
DrawStatusTextA
ImageList_AddMasked
InitCommonControlsEx
DrawStatusText
CreatePropertySheetPageA
ImageList_GetFlags
ImageList_DragEnter

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

132c6d99a9eba6691bcc122e3931264f

Headers

File Characteristics

Imports

kernel32

user32

comctl32

Sections

.text Size: 104KB - Virtual size: 101KB

.rdata Size: 456KB - Virtual size: 453KB

.data Size: 132KB - Virtual size: 138KB

.rsrc Size: 108KB - Virtual size: 107KB

.text
Size: 104KB - Virtual size: 101KB

.rdata
Size: 456KB - Virtual size: 453KB

.data
Size: 132KB - Virtual size: 138KB

.rsrc
Size: 108KB - Virtual size: 107KB