869bb46b9df96a6cfee8ece32ea571e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

869bb46b9df96a6cfee8ece32ea571e5_JaffaCakes118
Size

172KB
MD5

869bb46b9df96a6cfee8ece32ea571e5
SHA1

46701e16056e6d8981ab27d9ebb2047ef7d4134a
SHA256

16306931edf2e668e7a02516fb8c01b33d0b7f1c9c569b24b4872133ea1dede6
SHA512

814bee8f7e5e4b8aa26cbb3c41064680fbfa3fed8d94a1c019c7f1fc983cfb10718a377ddbd1d9820aa8c8efc8f024415122e87815f06557366b2152422d7d04
SSDEEP

3072:9Xjpi0Gpi72gjMVCLbZvUHqT1GccpufVJU:JVggjMVCLb1UU+QJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
869bb46b9df96a6cfee8ece32ea571e5_JaffaCakes118

Files

869bb46b9df96a6cfee8ece32ea571e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5daebf8eec2f2244c4549b0759287ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

gethostbyname

wininet

InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState

kernel32

GetModuleHandleA
InterlockedIncrement
GetTempPathA
GetLastError
CreateDirectoryA
lstrcpyA
GetModuleFileNameA
GetFileSize
CreateFileA
DeleteFileA
FlushFileBuffers
WriteFile
GetTickCount
CreateThread
GetCommandLineA
lstrcmpA
GetShortPathNameA
CopyFileA
GetVersion
GetFullPathNameA
DebugBreak
OutputDebugStringA
GetStringTypeExA
GetThreadLocale
GetProcAddress
GetDiskFreeSpaceA
CreateMutexA
MulDiv
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
Sleep
lstrcatA
GetVersionExA
CloseHandle
LoadLibraryA
HeapAlloc
GetSystemInfo
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceA
GlobalAlloc
lstrlenW
MultiByteToWideChar
GlobalUnlock
GlobalLock
CompareStringA
lstrcmpiA
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
ExitProcess
HeapReAlloc
HeapFree
ReadFile
GetACP
GetOEMCP
InterlockedDecrement
lstrlenA
GetModuleFileNameW
SetEndOfFile
GetModuleHandleW
GetCurrentThreadId
SetLastError
LoadLibraryW
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
RtlUnwind
GetStdHandle
LCMapStringA
LCMapStringW
GetFileType
TerminateProcess
SetStdHandle

user32

DispatchMessageA
ShowWindow
SetWindowTextA
IsDialogMessageA
SendMessageA
CharLowerA
GetMessageA
PostQuitMessage
LoadIconA
InvalidateRgn
RedrawWindow
GetFocus
CharNextA
GetDlgItem
DestroyWindow
SetWindowPos
SetCapture
ReleaseCapture
wsprintfA
CreateWindowExA
CreateAcceleratorTableA
GetDesktopWindow
GetClassNameA
IsWindow
BeginPaint
FillRect
EndPaint
GetDC
ReleaseDC
MapWindowPoints
GetWindowRect
GetClientRect
PostMessageA
MoveWindow
IsChild
SetFocus
GetSysColor
CallWindowProcA
GetWindowTextA
DefWindowProcA
GetClassInfoExA
RegisterClassExA
RegisterWindowMessageA
LoadCursorA
CreateDialogIndirectParamA
GetWindowLongA
GetParent
GetWindow
SystemParametersInfoA
LoadStringA
wvsprintfA
InvalidateRect
SetWindowLongA
GetWindowTextLengthA

gdi32

BitBlt
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
GetObjectA
GetStockObject
CreateSolidBrush
DeleteDC
SelectObject
GetDeviceCaps

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

shell32

SHGetMalloc
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellExecuteA
SHFileOperationA

ole32

CoTaskMemAlloc
OleUninitialize
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoInitialize
CoUninitialize

oleaut32

SysStringLen
LoadRegTypeLi
SysAllocString
SysAllocStringLen
VariantClear
SysFreeString
OleCreateFontIndirect

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5daebf8eec2f2244c4549b0759287ea

Headers

File Characteristics

Imports

wsock32

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 56KB - Virtual size: 53KB