0145987fd71fce536bd3351865537f89_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0145987fd71fce536bd3351865537f89_JaffaCakes118
Size

172KB
MD5

0145987fd71fce536bd3351865537f89
SHA1

0d6e03c402c274677b83f3e0b6e9253016bc81f3
SHA256

efdf6472ed3f36e3580bf97601e2872ac980b53504dcf07eb50443a89d5ef938
SHA512

935e5f59d86898a2031e1afde14a703e20604b45535d19fe9fd10395368eeb40aaca64b01ed6d4693c55f22a3bd4532b70eb0d17fda0dc746aa56a14eb06d0a9
SSDEEP

3072:9P9v4CpwqtzR0ZQ6vmE7OOcBe9Xh7+YHdqK6lk:9Vv4Cpws+Q6+E7rKNll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0145987fd71fce536bd3351865537f89_JaffaCakes118

Files

0145987fd71fce536bd3351865537f89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90194adaff577d771cc7c7119103fa85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
CreateFileA
SetErrorMode
InitializeCriticalSection
lstrlenW
InterlockedExchange
LockResource
SetEvent
FindClose
CompareStringA
GlobalFree
FreeEnvironmentStringsA
WaitForSingleObjectEx
GetLocalTime
GlobalLock
ReadFileEx
CreateEventA
SetEndOfFile
FormatMessageW
CreateFileW
SetStdHandle
CloseHandle
LoadResource
CreateEventW
CompareStringW
GetFileSize
GetFileAttributesW
ReleaseMutex
HeapDestroy
SetEnvironmentVariableA
InterlockedExchangeAdd
SleepEx
GlobalAlloc
ReadFile
SetFilePointerEx
GlobalUnlock
ResetEvent
lstrlenA
GetVersionExA
DeleteFileW
WaitForMultipleObjectsEx
GetThreadLocale
GetSystemTime
DeleteFileA
FormatMessageA
GetSystemInfo
RaiseException
TryEnterCriticalSection
GetModuleFileNameW
WriteFileEx
FindCloseChangeNotification
GetStartupInfoA
GetFileAttributesA
SetFilePointer
CreateThread
SizeofResource
LocalFree
FreeLibrary
InterlockedCompareExchange
GetFileSizeEx
RegisterWaitForSingleObject
LocalAlloc
GetModuleHandleA
WaitForSingleObject
VirtualAlloc

user32

SetMenuItemBitmaps
GetWindowWord
SetWindowPos
LoadStringA
SetMenuItemInfoW
DefWindowProcA
RegisterClassA
DestroyIcon
SendMessageA
ShowWindowAsync
GetCursorPos
LoadIconW
SetWindowLongA
SetMenuItemInfoA
GetMenu
GetClientRect
DefWindowProcW
LoadCursorW
GetForegroundWindow
PostMessageA
CreateWindowExW
SetWindowTextW
SetWindowTextA
ReleaseDC
GetMenuItemCount
TranslateMessage
GetWindowTextW
MessageBeep

ole32

CoSetProxyBlanket
CoRegisterClassObject
CoTaskMemRealloc
CoRegisterChannelHook

advapi32

CheckTokenMembership
OpenThreadToken
QueryServiceStatus
GetSecurityDescriptorDacl
GetTokenInformation
RegDeleteKeyA
RegOpenKeyExA
IsValidSid
RegCreateKeyW
LookupAccountSidA
SetSecurityDescriptorDacl
RegCloseKey

shell32

SHBindToParent

msvcrt

__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__p__commode
__set_app_type
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90194adaff577d771cc7c7119103fa85

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

shell32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 132KB - Virtual size: 226KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 132KB - Virtual size: 226KB

.rsrc
Size: 24KB - Virtual size: 20KB