71d45081e55735c6de93ce4a06d7ff53_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

71d45081e55735c6de93ce4a06d7ff53_JaffaCakes118
Size

4.3MB
MD5

71d45081e55735c6de93ce4a06d7ff53
SHA1

594039be182af4ee4f4f5f62e688e05c8925de4d
SHA256

68d6f02fc890c24f4592f0a3663b528f948fe9fadf08aaca28b136fbba8e1536
SHA512

9cdc60ec09ce3f463932f40b67d2482bb6cb48b03ae3ecde2edfa64a69206a727b6c778533c3c88321588b15e9de044cf6c4bafd67fc9bc55f50472f212b8788
SSDEEP

98304:tDtU01n6XV2IiAJg7pSOXhXO8lcTVHs5ZN7Jh+AfiL:BtUen6XMIiAm7zXdO8l+VHMF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d45081e55735c6de93ce4a06d7ff53_JaffaCakes118

Files

71d45081e55735c6de93ce4a06d7ff53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93a5b1d978fe8b973a889d48f50be3a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
ReadFileScatter
GetSystemTimeAsFileTime
GlobalReAlloc
SetMailslotInfo
WriteFile
GetFileInformationByHandle
FindFirstFileExW
SetStdHandle
Beep
lstrcpyA
GetEnvironmentVariableW
WritePrivateProfileStringW
FatalAppExitA
VirtualUnlock
FindResourceExA
GenerateConsoleCtrlEvent
LeaveCriticalSection
SetEnvironmentVariableA
FreeLibraryAndExitThread
PulseEvent
SetNamedPipeHandleState
DosDateTimeToFileTime
CreateProcessA
GlobalFlags
MoveFileExA
GetCompressedFileSizeW
GetWindowsDirectoryA
SetCurrentDirectoryA
OpenFile
EnumResourceNamesW
IsBadReadPtr
WritePrivateProfileSectionA
FileTimeToLocalFileTime
GetDiskFreeSpaceExA
GlobalDeleteAtom
GlobalFree
ReadConsoleA
GetCommState
WriteConsoleOutputW
GetShortPathNameA
EnumDateFormatsW
FindNextChangeNotification
CreateWaitableTimerA
GetSystemDirectoryW
GetACP
GetTapeStatus
GetOEMCP
GlobalAddAtomA
SetVolumeLabelA
ExitThread
ReleaseSemaphore
OutputDebugStringW
GetPrivateProfileStringW
SetTimeZoneInformation
GetDiskFreeSpaceW
lstrcmpA
CreatePipe
GetProcessTimes
ReleaseMutex
FlushConsoleInputBuffer
SizeofResource
WriteConsoleOutputCharacterA
ClearCommBreak
DuplicateHandle
PeekConsoleInputW
EnumResourceLanguagesW
EnumCalendarInfoW
ReadFile
GetProfileIntA
VirtualQuery
lstrcatW
LoadLibraryExA
GlobalFindAtomW
QueryDosDeviceW
SetThreadAffinityMask
GetUserDefaultLangID
DeleteCriticalSection
SwitchToFiber
GetSystemInfo
CreateDirectoryW
CreateIoCompletionPort
LocalAlloc
ExitProcess

user32

DispatchMessageA

gdi32

StartPage
SetBkMode
PlayMetaFileRecord
OffsetWindowOrgEx
SelectClipRgn
SetBitmapBits
GetObjectW
GetStockObject
RemoveFontResourceW
CreateRectRgn
CreateDiscardableBitmap
SetWindowExtEx
CreateEnhMetaFileA
GetDIBColorTable
DeleteObject
PathToRegion

advapi32

CryptVerifySignatureA
SetSecurityDescriptorDacl
LookupPrivilegeDisplayNameA
NotifyBootConfigStatus
OpenSCManagerA
CryptAcquireContextW
RegEnumKeyExA
RegOpenKeyExA
RegisterServiceCtrlHandlerW
RegQueryValueExA
InitiateSystemShutdownW
AllocateLocallyUniqueId

ole32

StgCreateStorageEx
CoMarshalInterface
GetRunningObjectTable
OleSaveToStream
CoInitializeEx
CoReleaseMarshalData
ReadFmtUserTypeStg

oleaut32

SetErrorInfo
VariantChangeType

comctl32

ImageList_DragMove
ImageList_GetDragImage

shlwapi

PathUnquoteSpacesA
PathRemoveBackslashW

Sections

.text
Size: 5KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93a5b1d978fe8b973a889d48f50be3a3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 5KB - Virtual size: 224KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4.0MB - Virtual size: 4.0MB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 5KB - Virtual size: 224KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4.0MB - Virtual size: 4.0MB

.rsrc
Size: 19KB - Virtual size: 18KB