6fe9a4d7d223b30914ecf97c05505695_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6fe9a4d7d223b30914ecf97c05505695_JaffaCakes118
Size

236KB
MD5

6fe9a4d7d223b30914ecf97c05505695
SHA1

030a32fb3486de780e9d6d22f7e0d60548be5c18
SHA256

2d028481b52f6f1c9a22f14a4419acf7a5601103d82ec3fdbcc686863df51ae0
SHA512

2955109ac99f6ff4ad9fc4db99d7aad5cdf10e4acb986257a8a755fe84e6fc82d46797b2a9972337877041eb308c3c07b65ada258068c8b199e32c846d1cda57
SSDEEP

3072:+mrFbDTY7F5mQrEeNoAHavL7fsNnvsVHqkOoJbfMca/gzr7e8n6Qeie4AKe1S:+D7Dn4eNoA+fSqHAoJTjPmwevv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe9a4d7d223b30914ecf97c05505695_JaffaCakes118

Files

6fe9a4d7d223b30914ecf97c05505695_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f0768ea12a26bd8dc434dbdf113221a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
_chdrive
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
memmove
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
abs
_ftol
strcpy
atof
atol
srand
strcat
_strnicmp
strcmp
strtok
strncpy
??2@YAPAXI@Z
atoi
strcspn
sscanf
strlen
memcmp
isdigit
malloc
_strcmpi
_itoa
_strupr
_strlwr
_stricmp
_chmod
_rmdir
memchr
realloc
strrchr
strchr
memcpy
strncmp
free
rand
sprintf
time
_access
strstr
strncat
__CxxFrameHandler
memset
??3@YAXPAX@Z
_chdir

shfolder

SHGetFolderPathA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString

oleaut32

SysFreeString
GetErrorInfo
VariantClear
SysAllocString
VariantInit

kernel32

ResetEvent
SetEvent
FreeResource
GetTempFileNameA
TerminateProcess
GetCurrentProcess
CreateDirectoryA
MultiByteToWideChar
FormatMessageA
GetVersionExA
GetWindowsDirectoryA
GetProcAddress
WaitForSingleObject
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateEventA
OutputDebugStringA
CloseHandle
InterlockedDecrement
lstrcpyA
SetLastError
lstrlenA
Sleep
CopyFileA
GetLastError
DeleteFileA
ExitThread
lstrcmpiA
GetModuleFileNameA
ReadFile
CreateFileA
RemoveDirectoryA
lstrcmpA
lstrcpynA
GetFileSize
WriteFile
SetFilePointer
GetModuleHandleA
GetTickCount
WideCharToMultiByte
lstrlenW
FindResourceA
GetTempPathA
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateThread
GetLocalTime
FreeLibrary
SizeofResource
GetSystemDirectoryA
GetStartupInfoA
LoadResource
lstrcatA
LockResource
LoadLibraryA

user32

RedrawWindow
IsWindow
PostMessageA
FindWindowA
CharLowerA
CharUpperA
MessageBoxA
GetActiveWindow
DestroyWindow
KillTimer
GetDC
ReleaseDC
ScreenToClient
BeginPaint
EndPaint
InvalidateRect
LoadImageA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
ShowWindow
SetForegroundWindow
ReleaseCapture
GetParent
GetDesktopWindow
LoadMenuA
GetCursorPos
GetSubMenu
TrackPopupMenuEx
DestroyMenu
SetFocus
GetAsyncKeyState
EnableMenuItem
GetWindowTextA
SetWindowLongA
GetWindowLongA
CallWindowProcA
EnableWindow
GetDlgItemTextA
GetWindow
IsIconic
LoadStringA
SetDlgItemTextA
SystemParametersInfoA
SetTimer
FillRect
DialogBoxParamA
EndDialog
SetWindowTextA
LoadIconA
GetClientRect
GetDlgItem
IsWindowVisible
SendMessageA
SetCapture
PeekMessageA
GetWindowThreadProcessId
GetDlgCtrlID
SetCursor
GetWindowRect
SetWindowPos

gdi32

RealizePalette
StretchBlt
CreateCompatibleDC
GetObjectA
SelectObject
BitBlt
DeleteDC
CreateFontA
SetTextColor
CreateSolidBrush
SetBkColor
DeleteObject
SelectPalette
CreatePalette
GetDIBColorTable

shell32

ShellExecuteA
Shell_NotifyIconA

urlmon

URLDownloadToFileA

wininet

InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCloseHandle
InternetSetStatusCallback
InternetOpenUrlA
InternetQueryDataAvailable

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

RegEnumValueA
CryptEncrypt
CryptDeriveKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CryptHashData
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptAcquireContextA
CryptDecrypt
CryptReleaseContext
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegConnectRegistryA
RegOpenKeyExA
RegCreateKeyExA

Sections

pec1
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f0768ea12a26bd8dc434dbdf113221a

Headers

File Characteristics

Imports

msvcrt

shfolder

ole32

oleaut32

kernel32

user32

gdi32

shell32

urlmon

wininet

version

advapi32

Sections

pec1 Size: 152KB - Virtual size: 152KB

.rsrc Size: 60KB - Virtual size: 60KB

.pec Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

pec1
Size: 152KB - Virtual size: 152KB

.rsrc
Size: 60KB - Virtual size: 60KB

.pec
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB