6aa0c02483001e9b42059ba50eb02eec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6aa0c02483001e9b42059ba50eb02eec_JaffaCakes118
Size

181KB
MD5

6aa0c02483001e9b42059ba50eb02eec
SHA1

eab5a09684d28f25965ae63c6a8395679ec01cb6
SHA256

e8bb99207e6a785b947c3c5677ab5a884762fe8c36e67ab38e0561f573c264a0
SHA512

581088388bf39afab20df76022d33a0cd51cee111b2e2260bf3e5971ed94a7214bacd13fda6b7a1161bfd6720c3ec046806842a2788342d183d71b38a29801aa
SSDEEP

3072:QrkxO2q40qP+JZPcsPrIowhnvUVM2pcSL25cmPHgUJQrTbxm2V8o/IxBQ5U4A:QrkxOD68xwJ8NpcP5cmhQrb+ow94A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Kamika.exe

Files

6aa0c02483001e9b42059ba50eb02eec_JaffaCakes118
.rar
Kamika.exe
.exe windows:4 windows x86 arch:x86

bfbe06bc2b5774c2713f2001f28f077d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetModuleFileNameA
GetTempFileNameA
CopyFileA
CreateDirectoryA
DeleteFileA
GlobalAlloc
WinExec
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalDeleteAtom
GetTickCount
GlobalLock
GlobalUnlock
CloseHandle
MultiByteToWideChar
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
GetLastError
UnmapViewOfFile
LocalLock
LocalAlloc
LocalUnlock
LocalFree
SizeofResource
GlobalReAlloc
LockResource
FindResourceA
LoadResource
GetProfileStringA
FreeResource
lstrcatA
GetStartupInfoA
GlobalAddAtomA
GetFileAttributesA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
GetOEMCP
GetACP
GetCPInfo
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
CreateFileA
FlushFileBuffers
ReadFile
VirtualFree
HeapCreate
GlobalFree
HeapDestroy
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetModuleHandleA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetProcAddress
LoadLibraryA
SetEndOfFile
HeapSize
VirtualAlloc

user32

UnpackDDElParam
FreeDDElParam
ShowWindow
SetWindowPos
MessageBoxA
LoadStringA
wsprintfA
IntersectRect
GetCursorPos
GetWindowRect
SetRect
IsWindow
GetDC
ReleaseDC
SendMessageA
DialogBoxParamA
MoveWindow
GetClientRect
EndDialog
DestroyCursor
SetTimer
KillTimer
InvalidateRect
SetCursor
PtInRect
LoadCursorA
GetAsyncKeyState
EndPaint
BeginPaint
SetDlgItemTextA
GetDlgItemTextA
CopyRect
GetWindow
GetClassNameA
GetTopWindow
GetDesktopWindow
IsWindowVisible
GetWindowLongA
SetWindowLongA
EnumWindows
GetUpdateRect
IsRectEmpty
UpdateWindow
PostMessageA
SetRectEmpty
UnionRect
LoadIconA
GetMessageA
FindWindowA
PostQuitMessage
SetClassWord
SetWindowTextA
DefWindowProcA
SetForegroundWindow
TrackPopupMenu
DestroyWindow
DestroyMenu
CreateWindowExA
LoadMenuA
GetSubMenu
RegisterClassA
CheckMenuItem
OffsetRect
FillRect
DispatchMessageA
TranslateMessage
EqualRect

gdi32

RealizePalette
GetObjectA
DeleteDC
DeleteObject
BitBlt
SetMapMode
SetBkColor
CreateCompatibleBitmap
CreateBitmap
GetMapMode
SelectObject
CreateCompatibleDC
GetPixel
GetStockObject
SetBkMode
GetDeviceCaps
CreateDIBitmap
CreatePalette
CreateSolidBrush
SelectClipRgn
CreateRectRgnIndirect
SetRectRgn
SelectPalette

comdlg32

GetOpenFileNameA

advapi32

RegQueryValueA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

winmm

mciSendCommandA

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfbe06bc2b5774c2713f2001f28f077d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

winmm

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 21KB - Virtual size: 36KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 155KB - Virtual size: 154KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 21KB - Virtual size: 36KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 155KB - Virtual size: 154KB