6ae8933085033d99d48178cd26367ad0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6ae8933085033d99d48178cd26367ad0_JaffaCakes118
Size

152KB
MD5

6ae8933085033d99d48178cd26367ad0
SHA1

1d85c99689a958a5343b2081a6be1f7ccf8a9b6d
SHA256

854cc26cc891688a9619d9a7e120d26f15a444a384e5f6a509c4a02f839426d1
SHA512

d1ca28f73ecaa4a5572e41279c0e3378b015037fd91e5f8992d37c18382b3c20666c4af255d558e5a2635e4a2f56832e6d1ff5107bb9339b09518123d1e95c6f
SSDEEP

3072:lX/4eI9RNZbOKCQp5JCMhPo9FYbgWyQvaWiPYgE5I1:B/AFbkMbgWyoE3EO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ae8933085033d99d48178cd26367ad0_JaffaCakes118

Files

6ae8933085033d99d48178cd26367ad0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

WinExec
GetDriveTypeA
DeleteFileA
GetVersionExA
GetModuleHandleA
GetSystemInfo
FindFirstFileA
IsDBCSLeadByte
GlobalFree
lstrlenA
lstrcpyA
FlushFileBuffers
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
WriteFile
GetLastError
GetTickCount
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcatA
lstrcmpiA
GlobalHandle
GetUserDefaultLCID
FindResourceA
GetProfileStringA
SetErrorMode
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
FindClose
GetDiskFreeSpaceA
WritePrivateProfileStringA
LCMapStringW
HeapReAlloc
GetProcAddress
HeapAlloc
SetEnvironmentVariableA
VirtualAlloc
GetACP
CompareStringW
GetOEMCP
GetCPInfo
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
CreateDirectoryA

user32

DestroyWindow
EndDialog
DrawIcon
DialogBoxParamA
GetWindowPlacement
LoadIconA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
PostQuitMessage
SetWindowTextA
GetDlgItem
InflateRect
SendMessageA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
LoadCursorA
GetClassInfoA
RegisterClassA
MoveWindow
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetParent
SendDlgItemMessageA
CharNextA
SetRect
GetSystemMetrics
GetSysColor
CreateWindowExA
DrawTextA

gdi32

RestoreDC
DeleteObject
CreateFontIndirectA
GetObjectA
SaveDC
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
CreateSolidBrush
CreateDIBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
UnrealizeObject
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn
CreateRectRgn
GetStockObject
GetTextExtentPointA
SelectObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 80KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rvynttk
Size: - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.prdata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 3KB

.prdata Size: 80KB - Virtual size: 108KB

rvynttk Size: - Virtual size: 80KB

.prdata Size: - Virtual size: 60KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB

.prdata
Size: 80KB - Virtual size: 108KB

rvynttk
Size: - Virtual size: 80KB

.prdata
Size: - Virtual size: 60KB