64ed68a42153b9a0a67de73fa7f1ec95_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

64ed68a42153b9a0a67de73fa7f1ec95_JaffaCakes118
Size

190KB
MD5

64ed68a42153b9a0a67de73fa7f1ec95
SHA1

8a613cce217d13a1c692d11963024ea52fe4bad2
SHA256

85e318ac7faaa94a832d07ba9e774928c75901f56e6eeb036fa1ad181c6df700
SHA512

c034138d10ec8875a07506b89559b055c74557a040ded122c3d408448f21409b28d1d09b6a3a9e24ef6eb7600688ce5c5beda363cb8064e0682d0bacb7f02c9d
SSDEEP

3072:/6lXOn6Nf9PO2RK4IgdMf1ZUUhkuZLsWUEsqor5dz6TehDOE6cMUFjzGYV3XQ0OR:/d63PD0GdIfUUhkuZgEzoryeFb6vUdzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ed68a42153b9a0a67de73fa7f1ec95_JaffaCakes118

Files

64ed68a42153b9a0a67de73fa7f1ec95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b47e62bfc0f398274ac770027bdf96a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfW
wsprintfA
MessageBoxA
GetKeyState
CharUpperA
CharNextA
CharLowerA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

kernel32

SetEvent
InterlockedDecrement
GetProcAddress
CompareStringW
SetHandleCount
HeapReAlloc
GetThreadIOPendingFlag
GetModuleHandleA
lstrcmpW
SetStdHandle
GetStringTypeA
GlobalAlloc
OutputDebugStringA
GetDiskFreeSpaceExA
WideCharToMultiByte
InterlockedExchange
GetTempFileNameA
LeaveCriticalSection
TlsFree
RaiseException
HeapDestroy
GetStringTypeW
FlushFileBuffers
GlobalFree
GetEnvironmentVariableA
HeapCreate
CreateSemaphoreA
TransmitCommChar
LCMapStringW
HeapAlloc
CreateFileW
UnmapViewOfFile
FreeLibrary
InitializeCriticalSection
GetEnvironmentStringsW
GetTempPathA
TlsAlloc
MapViewOfFile
SetLastError
ReleaseSemaphore
FreeEnvironmentStringsA
WriteFile
UnhandledExceptionFilter
DeleteCriticalSection
CreateMutexA
IsBadCodePtr
GetTickCount
GetOEMCP
GetPrivateProfileStringA
GetSystemTime
TerminateProcess
WritePrivateProfileStringA
FileTimeToSystemTime
ExitThread
IsDBCSLeadByte
InterlockedIncrement
EnterCriticalSection
EnumResourceNamesW
GetACP
GetCommandLineA
GetStdHandle
GetUserDefaultLCID
ExitProcess
GetCPInfo
LoadLibraryA
FreeEnvironmentStringsW
GetStartupInfoA
GetEnvironmentStrings
ExitProcess
MultiByteToWideChar
TlsGetValue
SetEndOfFile
FileTimeToLocalFileTime
TlsSetValue
CompareStringA
WaitForSingleObject
Sleep
lstrcpyA
GetFullPathNameW
IsBadReadPtr
CloseHandle
GetCurrentThreadId
CreateFileMappingA
CreateThread
GetLastError
GetModuleFileNameA
GetFileType
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetCurrentProcess
GetThreadPriority
SetPriorityClass
IsBadWritePtr
RtlUnwind
HeapFree
GlobalUnlock
GetTempPathW
GetFullPathNameA
GetPriorityClass
LCMapStringA
ResetEvent
HeapSize
lstrcmpA
LoadLibraryW
SetEnvironmentVariableA

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b47e62bfc0f398274ac770027bdf96a

Headers

File Characteristics

Imports

user32

msimg32

shlwapi

advapi32

kernel32

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 19KB - Virtual size: 18KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 19KB - Virtual size: 18KB

.crt
Size: 512B - Virtual size: 84KB