60a3bc719957e681ae95782932d6f12d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

60a3bc719957e681ae95782932d6f12d_JaffaCakes118
Size

279KB
MD5

60a3bc719957e681ae95782932d6f12d
SHA1

2b93c9fb5a9d1c32c09a8d234a6b23ef8f50edfc
SHA256

b7e5ce9a2e2b14e26902a2711b4ce0dde5ec00e04442de62273426e233ef946f
SHA512

c9dbd608358c8e339d94e5c33db93717aabfd1317303d5cd05419f69e6653927a43ca5b222a9980be8fb4b7fab64cf7d1d25f25e6704681778bbb939036d5483
SSDEEP

6144:llGGQgTEldXbJzcWUUWWagxiR7KQbMX5Xa71Qb+YW3Ns4zeZ:l/3IzXbJznFWWt8VS5XawW3Ns4zeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60a3bc719957e681ae95782932d6f12d_JaffaCakes118

Files

60a3bc719957e681ae95782932d6f12d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28e63fedc3a1938657c80fcdac03fc34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
GetVersion
GetProcAddress

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

imagehlp

FindFileInPath
SymRegisterCallback64
FindExecutableImage
SymGetLineFromName
SymEnumerateSymbols64
SymGetSymNext
SymFromName
SymGetLinePrev64
SymSetSearchPath
SymEnumerateModules64
StackWalk
ImageRvaToSection
SplitSymbols
SymGetModuleInfoW
SymInitialize
SymGetLineNext64

vss_ps

DllUnregisterServer
DllGetClassObject

Sections

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cS
Size: 3KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lxH
Size: 1024B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ph
Size: 4KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 103KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pQ
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 113KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KVAeNH
Size: 5KB - Virtual size: 970KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.g
Size: 3KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28e63fedc3a1938657c80fcdac03fc34

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

imagehlp

vss_ps

Sections

.rdata Size: 10KB - Virtual size: 9KB

.text Size: 18KB - Virtual size: 17KB

.cS Size: 3KB - Virtual size: 249KB

.lxH Size: 1024B - Virtual size: 47KB

.rdata Size: 2KB - Virtual size: 14KB

.Ph Size: 4KB - Virtual size: 544KB

.edata Size: 103KB - Virtual size: 142KB

.pQ Size: 1024B - Virtual size: 16KB

.data Size: 7KB - Virtual size: 60KB

.edata Size: 113KB - Virtual size: 204KB

.KVAeNH Size: 5KB - Virtual size: 970KB

.g Size: 3KB - Virtual size: 135KB

.rsrc Size: 8KB - Virtual size: 7KB

.rdata
Size: 10KB - Virtual size: 9KB

.text
Size: 18KB - Virtual size: 17KB

.cS
Size: 3KB - Virtual size: 249KB

.lxH
Size: 1024B - Virtual size: 47KB

.rdata
Size: 2KB - Virtual size: 14KB

.Ph
Size: 4KB - Virtual size: 544KB

.edata
Size: 103KB - Virtual size: 142KB

.pQ
Size: 1024B - Virtual size: 16KB

.data
Size: 7KB - Virtual size: 60KB

.edata
Size: 113KB - Virtual size: 204KB

.KVAeNH
Size: 5KB - Virtual size: 970KB

.g
Size: 3KB - Virtual size: 135KB

.rsrc
Size: 8KB - Virtual size: 7KB