72cb6f6f992da9550f48c24ac19403bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

72cb6f6f992da9550f48c24ac19403bd_JaffaCakes118
Size

60KB
MD5

72cb6f6f992da9550f48c24ac19403bd
SHA1

49570cc298f329e919b83fb7c5b705ead855f7b0
SHA256

7754e1c04bed11d7cea20f2de0b55d644ee2ab9635e8e13cc2b9b09e8be66799
SHA512

0f291f2cd87c23af8123494a15796b7d2c9aaea65fa4fce2bd0091f991768fd6525a26b813dbcef7cf8638659a0abb3fcc4eb6baad155d2a78a825a59c974941
SSDEEP

768:t91b2RX6TZzKdwLLZQx4qoFV7+dcSAPbceh05edyl6hS:xUqTZzCYQ2qobicnA5eEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72cb6f6f992da9550f48c24ac19403bd_JaffaCakes118

Files

72cb6f6f992da9550f48c24ac19403bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

829c910ff525432772195efb7cf6eeeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
FindClose
FindNextFileA
GetLastError
CreateMutexA
lstrcmpiA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateFileA
CreateProcessA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
WriteFile
GlobalFree
LocalAlloc
DeleteFileA
CreateThread
GetLocalTime
lstrcatA
CreateDirectoryA
OpenProcess
RtlUnwind
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
GetComputerNameA
GetModuleFileNameA
lstrlenA
lstrcpyA
FindFirstFileA
Sleep
GetFileType
HeapFree
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
ReadFile

user32

GetWindowThreadProcessId
IsWindow
GetSystemMetrics
UpdateWindow
GetForegroundWindow
GetCursorPos
CharLowerA
TranslateMessage
GetMessageA
LoadImageA
RegisterClassExA
GetSysColorBrush
SetTimer
CreateWindowExA
wsprintfA
DispatchMessageA
GetWindowRect
GetWindowTextA
PostQuitMessage
CreatePopupMenu
AppendMenuA
SetForegroundWindow
TrackPopupMenu
PeekMessageA
DestroyMenu
DefWindowProcA

gdi32

GetObjectA
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
SetPixel
DeleteObject
DeleteDC
GetDIBits

advapi32

GetUserNameA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoInitialize

vic32

ord121
ord23
ord16
ord36
ord47
ord3
ord7

wininet

FtpSetCurrentDirectoryA
FtpCreateDirectoryA
FtpPutFileA
InternetCloseHandle
InternetOpenA
InternetConnectA

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

829c910ff525432772195efb7cf6eeeb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

vic32

wininet

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB