68feb3c2bf06240507efc770d4ad2b49_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

68feb3c2bf06240507efc770d4ad2b49_JaffaCakes118
Size

48KB
MD5

68feb3c2bf06240507efc770d4ad2b49
SHA1

99de0c1ac1f85bd3cb2d57995533b8478ef21ebe
SHA256

51cb37a5f7e221044cfd6ad757aef25ba04a57063293ff844a0428a715b19ffb
SHA512

181fd7a05cf532e5accc456b51cee356a457dd498bbcf789cad2f4723e9dcc1a2d85237b60222b46ffa3f4fbc0559a44d035f36176459b4c07d317131059c679
SSDEEP

768:fzpzhjel9r/Jz03UxdbZ04KpuZeN5W60UAFvNV4o25T:2q3aF0FEZeHKDAowT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68feb3c2bf06240507efc770d4ad2b49_JaffaCakes118

Files

68feb3c2bf06240507efc770d4ad2b49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c66f2f97b8517b3f0fd7381430da8a33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
InterlockedDecrement
WideCharToMultiByte
lstrlenW
FreeResource
GetUserDefaultLangID
HeapCreate
HeapDestroy
GetOEMCP
SizeofResource
GetCPInfo
RaiseException
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateFileA
LockResource
WriteFile
Sleep
GetLocalTime
GetModuleFileNameA
CloseHandle
CreateMutexA
GetLastError
GetACP
SetUnhandledExceptionFilter
HeapSize
GetFileType
GetStdHandle
SetHandleCount
GetVersion
GetCommandLineA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
lstrlenA
LocalFree
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
VirtualFree

user32

MessageBoxA
wsprintfA
SendMessageA
FindWindowExA
CreateWindowExA
TranslateMessage
GetMessageA
RegisterClassExA
UpdateWindow
DispatchMessageA
PostMessageA
GetClientRect
DefWindowProcA
ShowWindow

gdi32

GetStockObject

advapi32

RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoCreateInstance
OleInitialize

oleaut32

SysFreeString
VariantClear
SysAllocString

wininet

HttpOpenRequestA
InternetOpenA
InternetReadFile
HttpSendRequestA
InternetConnectA
InternetCloseHandle

version

VerQueryValueA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66f2f97b8517b3f0fd7381430da8a33

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

version

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 824B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 824B