77b6575487f0a4b3e266af1e0609c57e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

77b6575487f0a4b3e266af1e0609c57e_JaffaCakes118
Size

116KB
MD5

77b6575487f0a4b3e266af1e0609c57e
SHA1

f3d30c75b8af724083e6b7cf0f2faa2dbfa356b7
SHA256

a4ae939f2b564534fc0bddd7fd951c3923c31091bb2b24b63f42f558849a0d76
SHA512

e0f3dc2b3e21fa64c5f49b39af561e671e296a99a05ba508c5aac45e0c6f58cf77ef38326fe6ed8dda81470e9aeb2ef250723cbe8f9702c74471350ec2f9e22d
SSDEEP

1536:8XD/pnIVmKK6If/xqio43uYRmX+ZmL7HN1VEUduzP8wHtqDU:YdNJpXoaupu6P6UduzPnHtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b6575487f0a4b3e266af1e0609c57e_JaffaCakes118

Files

77b6575487f0a4b3e266af1e0609c57e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

278a6e80160e7418671f1aeeb490439d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetProcAddress
GetVolumeInformationA
GetFullPathNameA
lstrcmpiA
GetModuleFileNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
WaitForSingleObject
lstrcatA
GetVersion
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
lstrcmpA
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
ExitProcess
RaiseException
SetStdHandle
GetFileType
HeapAlloc
HeapFree
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindFirstFileA
FindClose
GetFileTime
GetFileSize
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
FormatMessageA
LocalFree
LocalAlloc
FreeLibrary
lstrcpyA
lstrcpynA
lstrlenA
EnterCriticalSection
CreateMutexA
GetLastError
CloseHandle
GetComputerNameA
GetVersionExA
TlsAlloc
Sleep

user32

GetMenuCheckMarkDimensions
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadStringA
GetSystemMetrics
CharUpperA
UnhookWindowsHookEx
ShowWindow
FindWindowA
IsWindowEnabled

shell32

ShellExecuteA

comctl32

ord17

wininet

InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetGetLastResponseInfoA

urlmon

URLDownloadToFileA

gdi32

SetTextColor
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetClipBox
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
SetBkColor
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetObjectA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

278a6e80160e7418671f1aeeb490439d

Headers

File Characteristics

Imports

kernel32

user32

shell32

comctl32

wininet

urlmon

gdi32

winspool.drv

comdlg32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 29KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 29KB