769ffe29f12c57e1f884e8ef2156e689_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

769ffe29f12c57e1f884e8ef2156e689_JaffaCakes118
Size

248KB
MD5

769ffe29f12c57e1f884e8ef2156e689
SHA1

0249a27a38986df768afbc5a67068908820f3fd5
SHA256

ecbfa2d43d241385777233b8de5da05ed6f5ed935af51e1124fcd97a9cd0194d
SHA512

79e4f0798b4f09fbdf81ea3719791e2507392d6d6d0e07d1b67155bfdaf5f4649d41c8e1275d319e220f7f72df21d34c83d48f0129767d092c764575978b6d60
SSDEEP

6144:D545MNV5tuRk64B4mTPrFLmRi3iTiVkrbw:D546Nikjlm03iTiSPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769ffe29f12c57e1f884e8ef2156e689_JaffaCakes118

Files

769ffe29f12c57e1f884e8ef2156e689_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c47125b9d68243dfc7ea80e615c7e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

FindResourceA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultLangID
MulDiv
GetDiskFreeSpaceExA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
CopyFileA
GetLastError
SetFileAttributesA
ReleaseMutex
WaitForSingleObject
CreateMutexA
LCMapStringW
LCMapStringA
SetEndOfFile
GetSystemInfo
LoadResource
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCPInfo
InitializeCriticalSection
VirtualQuery
InterlockedExchange
FlushFileBuffers
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
LockResource
CreateFileA
WriteFile
CloseHandle
FreeResource
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
VirtualProtect
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
RtlUnwind
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

RegisterWindowMessageA
CharToOemA
GetMessageA
LoadIconA
LoadCursorA
GetSysColor
RegisterClassA
DialogBoxParamA
CreateDialogParamA
InvalidateRect
GetClientRect
SetWindowTextA
SetFocus
DefWindowProcA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
SetWindowLongA
EndDialog
OemToCharA
GetParent
GetDesktopWindow
GetWindowRect
MoveWindow
DestroyWindow
DispatchMessageA
PeekMessageA
TranslateMessage
GetDlgItem
SendMessageA
MessageBoxA
GetDC
ReleaseDC

gdi32

DeleteObject
GetStockObject
SelectObject
Rectangle
SetBkMode
GetDeviceCaps
CreateFontA
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c47125b9d68243dfc7ea80e615c7e09

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 8KB - Virtual size: 900KB

.rsrc Size: 216KB - Virtual size: 212KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 8KB - Virtual size: 900KB

.rsrc
Size: 216KB - Virtual size: 212KB