88bd1f5b179f2f2060882d9fa9293d8b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

88bd1f5b179f2f2060882d9fa9293d8b_JaffaCakes118
Size

552KB
MD5

88bd1f5b179f2f2060882d9fa9293d8b
SHA1

4ac2c760b1df487221a65d717920c5494cc1dfa1
SHA256

b9ba8d73e767fa3e58b6d2e4861171671581b27835df5c7614f1f7b25d8ace82
SHA512

644450e4aad712d69a6173470c1efd658fb81cdd8905d59c5ff4102083c50d84c434e5cd5f5bcb0a467e732bc392adbf805906dcecd300c33b4820adead1d79f
SSDEEP

12288:ayIzfYcTjFWAgV/861FErEExEbF5bNsu/kT0sf8:aVdTjF9gV061ywn/S0sE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88bd1f5b179f2f2060882d9fa9293d8b_JaffaCakes118

Files

88bd1f5b179f2f2060882d9fa9293d8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a44a384fb587e8cb531168f7bb479fff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SheGetDirA
ExtractIconExA

kernel32

GetCommandLineW
CompareStringW
InterlockedDecrement
WideCharToMultiByte
VirtualQuery
GetLastError
FlushFileBuffers
HeapFree
GetStringTypeA
LeaveCriticalSection
GetSystemTime
SetLastError
MultiByteToWideChar
TlsGetValue
LoadLibraryA
HeapReAlloc
GetModuleFileNameW
WriteFile
GetCurrentThreadId
GetLocalTime
TlsAlloc
ExitProcess
GetModuleHandleA
GetEnvironmentStrings
GetFileType
HeapAlloc
UnhandledExceptionFilter
InterlockedIncrement
CompareStringA
GetCurrentThread
GetTickCount
GetStartupInfoW
GetModuleFileNameA
GetVersion
TlsSetValue
GetStartupInfoA
ReadFile
IsBadWritePtr
GetStringTypeW
SetFilePointer
GetTimeZoneInformation
TerminateProcess
RtlUnwind
CloseHandle
SetConsoleCursorInfo
InitializeCriticalSection
SetEnvironmentVariableA
EnterCriticalSection
HeapCreate
GetCPInfo
VirtualAlloc
SetHandleCount
FreeEnvironmentStringsA
GetCurrentProcess
LCMapStringA
VirtualFree
FreeEnvironmentStringsW
HeapDestroy
GetCommandLineA
TlsFree
FindResourceW
OpenMutexA
LCMapStringW
GetEnvironmentStringsW
GetProcAddress
CreateMutexA
DeleteCriticalSection
QueryPerformanceCounter
SetStdHandle
GetStdHandle
GetSystemTimeAsFileTime
CommConfigDialogA
GetCurrentProcessId
InterlockedExchange

comdlg32

FindTextA

comctl32

InitCommonControlsEx
ImageList_DrawIndirect
ImageList_GetImageRect

user32

SetUserObjectSecurity
DdeDisconnect
EnumDesktopWindows
MapVirtualKeyA
RegisterClassA
RegisterClassExA
GetMenuItemCount
GetMenuDefaultItem
SwapMouseButton
CreateIconIndirect
CallMsgFilterW
CharLowerBuffW
IsWindowVisible
SetMenuItemBitmaps
SetCapture
GetUserObjectSecurity
GetUserObjectInformationA
GetDlgItemTextA
SetUserObjectInformationW
GetMessageA
GetNextDlgGroupItem
GetAltTabInfo

wininet

InternetCheckConnectionA
InternetCreateUrlA
InternetHangUp

gdi32

EndDoc
ExtFloodFill
SetMapMode
AddFontResourceW
SetEnhMetaFileBits
OffsetViewportOrgEx
CreateFontA
StartDocA
GetTextFaceA
EnableEUDC
SetDeviceGammaRamp
GetKerningPairsW
CombineTransform
FrameRgn
CreateEnhMetaFileA
InvertRgn
GetBoundsRect
GetWindowExtEx
AngleArc
GetRegionData

Sections

.text
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a44a384fb587e8cb531168f7bb479fff

Headers

File Characteristics

Imports

shell32

kernel32

comdlg32

comctl32

user32

wininet

gdi32

Sections

.text Size: 381KB - Virtual size: 380KB

.rdata Size: 15KB - Virtual size: 28KB

.data Size: 113KB - Virtual size: 113KB

.rsrc Size: 42KB - Virtual size: 41KB

.text
Size: 381KB - Virtual size: 380KB

.rdata
Size: 15KB - Virtual size: 28KB

.data
Size: 113KB - Virtual size: 113KB

.rsrc
Size: 42KB - Virtual size: 41KB