85af71d3f6c9ab0d535eb1e6370c9997_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

85af71d3f6c9ab0d535eb1e6370c9997_JaffaCakes118
Size

798KB
MD5

85af71d3f6c9ab0d535eb1e6370c9997
SHA1

f79aa3ed404abe28290a28441f197671cf805567
SHA256

01bb048d39e9ccd6b43d85d61f3dec273e3e1d0db096c5e55f77807999b4c27f
SHA512

7e52202618681a8ac054884ff41e23d2d823ff70513b7160ac84acc8b4787c104fe7ea1b35ad411b4edcff0cdaba833ce6a5d5ca45059de8e82049cea080bcc6
SSDEEP

12288:1IfGKtyQlYBmF1OU7O0tvlqhuFsXMZVp1CGuAgpw/9/WJAfbpn7/ofp1S39:1IfGElgDY3bFqMZf1C2gaF/QAJ1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85af71d3f6c9ab0d535eb1e6370c9997_JaffaCakes118

Files

85af71d3f6c9ab0d535eb1e6370c9997_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c13d859124f92779da9db05c3517c61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetForegroundWindow
ReleaseDC
SetWindowPos
IsWindow
DispatchMessageA
GetDC
GetCursorPos
SendMessageA
GetClientRect
DestroyWindow
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
GetWindow
EnableMenuItem
RegisterClassA
GetSubMenu
CreateWindowExA
FillRect
SetFocus
PeekMessageA
BeginPaint
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
ReleaseCapture
CheckMenuItem
SetTimer
GetDlgItem
ScreenToClient
EndDialog
SetDlgItemTextA
MessageBoxA
DialogBoxParamA
GetSysColor
IsWindowVisible
DrawTextA
CallWindowProcA
SetCursor

kernel32

GlobalFree
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
LocalAlloc
ExpandEnvironmentStringsA
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
WideCharToMultiByte
GetStringTypeA
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
SetEvent
LocalFree
InitializeCriticalSection
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetSystemTime
lstrlenW
GetModuleFileNameW
IsDebuggerPresent
GetVersionExA
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
CreateThread
SetUnhandledExceptionFilter
GetTickCount
GetVersion
GetCurrentThreadId
GetCurrentThread
GetCommandLineA
GetCurrentProcessId
GetModuleHandleA
GetLastError
ExitProcess
VirtualAlloc
ResetEvent
GetOEMCP
Sleep
VirtualFree
FindResourceW
UnmapViewOfFile
IsValidCodePage
SizeofResource
InterlockedExchange
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
GetEnvironmentStrings
RemoveDirectoryA
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
lstrlenA
HeapCreate
LCMapStringW
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
WaitForMultipleObjects
FindFirstFileW
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
GlobalLock
DeleteFileW
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA

Sections

.text
Size: 761KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c13d859124f92779da9db05c3517c61

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 761KB - Virtual size: 1.1MB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 761KB - Virtual size: 1.1MB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 18KB - Virtual size: 17KB