74a0373304c0ee3fe3fd9d8dc05d14ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74a0373304c0ee3fe3fd9d8dc05d14ae_JaffaCakes118
Size

61KB
MD5

74a0373304c0ee3fe3fd9d8dc05d14ae
SHA1

73e44831d03f65324f35d755d6bd66586b998577
SHA256

26e2b54e1bfe81669ff8b8c37d1581e8c3aeb638b52e8f0f7b89ac185f0b717c
SHA512

63d95487a5e85812cf8e01d0ceaebeb97b7bf9bb00ebd93be440e915f3179296440578e6ba17afce75272909d0bc62706bdebdfcdafc24417b294faccd0b7644
SSDEEP

1536:47WGiXbOrq4YTxPNb42AVgEULOiWcMMMMMMMmMMMMKflt:4KGu1lEJvWOijMMMMMMMmMMMMKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a0373304c0ee3fe3fd9d8dc05d14ae_JaffaCakes118

Files

74a0373304c0ee3fe3fd9d8dc05d14ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9329d160447766966d67c1ddee6047c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyMenu
PostMessageW
AllowSetForegroundWindow
GetMenuStringW
GetSubMenu
CheckMenuItem
ReleaseDC
SendMessageW
SetWindowTextW
DestroyIcon
GetMenu
PtInRect
TrackPopupMenu
UnregisterClassA
SetActiveWindow
RegisterClassW
SetCapture
SetWindowPos
LoadStringW
GetClientRect
GetCursorPos
InflateRect
GetActiveWindow
CreateWindowExW
LoadIconA
GetDesktopWindow
GetWindowLongA
GetWindowTextLengthA
MoveWindow
OpenClipboard
DefWindowProcW

kernel32

ExitProcess
GetModuleFileNameW
LeaveCriticalSection
LocalFree
CreateThread
WaitForSingleObjectEx
GetCurrentProcess
HeapAlloc
TerminateProcess
FreeLibraryAndExitThread
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
TryEnterCriticalSection
GetCurrentThreadId
GetVersionExA
GetACP
SetFilePointer
GetModuleFileNameA
GetTickCount
GetFileSize
Sleep
ReadFile
FreeLibrary
GetStdHandle
CloseHandle
GetLastError
GetModuleHandleW
VirtualAlloc
WideCharToMultiByte
SetFilePointerEx
UnhandledExceptionFilter
RaiseException
GetModuleHandleA
DeleteCriticalSection
WaitForSingleObject
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
InterlockedIncrement
WriteFile
InterlockedDecrement
HeapFree
IsDebuggerPresent
EnterCriticalSection
QueryPerformanceCounter
TlsGetValue
InterlockedCompareExchange
SetLastError
FindClose
SetEvent
InitializeCriticalSection
InterlockedExchange
GetCurrentProcessId
LoadLibraryA
GetEnvironmentStringsW
GetVersionExW
GetFileSizeEx
CreateFileW
MultiByteToWideChar
FlushFileBuffers
CreateFileA

gdi32

CreateSolidBrush
CreatePolygonRgn
CreateRectRgn
CreateFontIndirectW
CreateDCA

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
PathAppendW
PathCombineW
PathFindExtensionW
PathAddBackslashW
PathStripToRootW
PathRemoveBackslashW
PathRemoveExtensionW
SHDeleteKeyW
SHSetValueW
StrCmpNW
PathIsFileSpecW
SHDeleteValueW
PathRelativePathToW
StrCmpIW
PathFindExtensionA
PathIsRootW
SHGetValueW
PathRemoveBlanksW
PathCommonPrefixW
SHCreateStreamOnFileW
PathAddBackslashA
PathAppendA
PathFileExistsA
StrCmpW
PathIsRelativeW
StrToIntExW
PathIsDirectoryW
StrCmpNIW
StrStrIA
StrToIntW
PathStripPathW
AssocQueryStringW
StrStrIW
PathCanonicalizeW
PathRenameExtensionW
PathIsURLW
PathRemoveFileSpecA
PathFindFileNameA
StrStrW

setupapi

SetupUninstallOEMInfA

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
strlen

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9329d160447766966d67c1ddee6047c7

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

shlwapi

setupapi

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 29KB - Virtual size: 112KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 29KB - Virtual size: 112KB

.rsrc
Size: 16KB - Virtual size: 15KB