6adc0cea9b9b3400fb956dd964293b0a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6adc0cea9b9b3400fb956dd964293b0a_JaffaCakes118
Size

198KB
MD5

6adc0cea9b9b3400fb956dd964293b0a
SHA1

19b5527536152a2964189fbcfc2d763375b583ab
SHA256

7c8adcef0a8029ec052d0511efeb731af57e4efa1a52a23ff93b3dfdc71a6386
SHA512

4b256197994fe1697993a48e1e8e5062e946fc9ae6973c548a349a74f28ad8f4d96c935138b6a73aa17f76d0c2ae0dcc86595a0b2f38435d11f56c4bd218ef54
SSDEEP

3072:9GW2m4M8CN3jd1AhnNz4i3u9w0HLqHArnoR15bwNi8rhrJvlP:9GU4MrZjdqhnNz76FOHAQLbw7rhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6adc0cea9b9b3400fb956dd964293b0a_JaffaCakes118

Files

6adc0cea9b9b3400fb956dd964293b0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateDirectoryA
lstrcpynA
SetLastError
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
MoveFileA
lstrcmpiA
FlushFileBuffers
WriteFile
SetEndOfFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
DeleteFileA
SetFileAttributesA
FileTimeToSystemTime
FindClose
FindFirstFileA
GetLocalTime
lstrcatA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
Sleep
IsBadReadPtr
CreateProcessA
InterlockedIncrement
InterlockedDecrement
ReleaseMutex
CreateMutexA
GetCommandLineA
lstrlenW
MultiByteToWideChar
LoadLibraryExA
IsDBCSLeadByte
RemoveDirectoryA
FindNextFileA
ResumeThread
SuspendThread
GetFileAttributesA
GetExitCodeProcess
WaitForSingleObject
GetStartupInfoA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
CopyFileA
LocalFree
IsBadCodePtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
GetFileType
GetSystemTimeAsFileTime
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
lstrlenA
GetVersionExA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
lstrcpyA
FreeLibrary
ReadFile
CreateFileA
GetFileSize
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
RaiseException

user32

ModifyMenuA
DestroyMenu
SetWindowLongA
GetWindowLongA
SetTimer
KillTimer
DestroyWindow
IsDialogMessageA
SetWindowPos
SendMessageA
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
MessageBoxA
IsWindow
EndDialog
LoadImageA
GetSystemMetrics
DialogBoxParamA
DestroyIcon
GetSubMenu
LoadIconA
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetActiveWindow
ShowWindow
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
CreateDialogParamA
DefWindowProcA
CharNextA
CharUpperA
PostQuitMessage
LoadMenuA
wsprintfA
UnregisterClassA
MapWindowPoints

advapi32

RegCloseKey
RegOpenKeyExA
OpenProcessToken
GetTokenInformation
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteExA
Shell_NotifyIconA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoInitializeSecurity
CoCreateGuid
OleRun
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
VarBstrCat
SafeArrayDestroy
SafeArrayGetElement

shlwapi

PathFileExistsA
PathRemoveFileSpecA
PathSkipRootA

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate

wininet

HttpSendRequestExA
HttpEndRequestA
InternetSetCookieA
InternetWriteFile
HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetConnectA
InternetAttemptConnect
InternetCloseHandle
InternetCrackUrlA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be1b294d72a1b8277bcec67b1db3e823

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

rpcrt4

wininet

version

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 16KB - Virtual size: 14KB