8a1c9d039d8e4f4c00af380e839c29bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a1c9d039d8e4f4c00af380e839c29bd_JaffaCakes118
Size

185KB
MD5

8a1c9d039d8e4f4c00af380e839c29bd
SHA1

1afd7138212bb6e810fe43b6e81032e809c1d639
SHA256

1db990a3b4120f5fbf37ce6a4dd8f303e938d790db5c93082cc51fc9b6df2acf
SHA512

d15f4e2a14e9506688ea4e5863105cc4c49fe19e06e3630d7ebb1be92affd7ac5e7375369e16baa0a10e03fcfe35929456aa44c0617fd3a19fcb5d33a4878139
SSDEEP

3072:WKjuTdyydVN8JKtu/zS1kTSGnp4ejslm3m7xeHDM+VHGOlBd4ErFfSQm4:WtFdcJKtubcGnp5okmI9GOlBSErFfS94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a1c9d039d8e4f4c00af380e839c29bd_JaffaCakes118

Files

8a1c9d039d8e4f4c00af380e839c29bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b728abbd8a580d62834f3d101bef365

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
CryptAcquireContextA
CryptImportKey
RegEnumKeyExA
RegOpenKeyExA
CryptDestroyHash
RegCloseKey
CryptHashData
CryptReleaseContext
RegQueryValueExA
RegEnumValueA
CryptDestroyKey
CryptCreateHash
CryptGetHashParam
CryptEncrypt
RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyA

shlwapi

PathFileExistsW
PathCombineW

kernel32

LocalAlloc
UnmapViewOfFile
GetLongPathNameW
CreateFileA
WideCharToMultiByte
GlobalAlloc
Sleep
GetProcessId
GlobalFree
ReadFile
LocalFree
GetFileSize
GetTickCount
EnumResourceTypesA
CreateFileMappingA
SetFilePointer
GetFileAttributesA
MapViewOfFile
GlobalSize
DisableThreadLibraryCalls
WriteFile
CreateFileW
CloseHandle

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

user32

SetFocus
wvsprintfA
GetClassInfoExA
SetWindowTextA
FillRect
DestroyWindow
SetTimer
wsprintfA
GetFocus
SetCapture
EndPaint
PostThreadMessageA
MoveWindow
IsWindow
PostMessageA
DestroyAcceleratorTable
ReleaseCapture
DefWindowProcA
ShowWindow
SetRect
CreateDialogParamA
SetWindowLongA
CallWindowProcA
GetClientRect
SendMessageTimeoutA
BeginPaint
GetParent
GetDesktopWindow
CopyRect
GetWindowTextLengthA
MsgWaitForMultipleObjects
DrawTextA
RedrawWindow
GetDC
GetWindowRect
LoadCursorA
InvalidateRect
GetClassNameA
GetSysColor
CharNextA
SetParent
GetWindowTextA
RegisterWindowMessageA
SendNotifyMessageA
SendMessageA
EqualRect
InvalidateRgn
DispatchMessageA
FindWindowA
KillTimer
IsChild
GetWindowLongA
ReleaseDC
GetWindow
EnumDisplayDevicesA
UnregisterClassA
PeekMessageA
GetQueueStatus
CreateWindowExA
RegisterClassExA
GetDlgItem
CreateAcceleratorTableA
GetActiveWindow
SetWindowPos

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
VerQueryValueA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

gdiplus

GdipDisposeImage
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipAlloc
GdipCreateBitmapFromFileICM
GdipFree
GdipCloneImage

ole32

CoUninitialize
CreateStreamOnHGlobal
CLSIDFromProgID
GetRunningObjectTable
CoInitialize
StgCreateDocfile
CoCreateInstance
CreateItemMoniker
CoTaskMemRealloc
CoInitializeSecurity
CoSetProxyBlanket
StgIsStorageFile
BindMoniker
OleUninitialize
StgOpenStorage
OleInitialize
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoGetClassObject
CoTaskMemFree
CreateBindCtx
CLSIDFromString

gdi32

CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
RealizePalette
GetStockObject
GetDIBits
SetStretchBltMode
ExtEscape
GetObjectA
DeleteObject
GetDeviceCaps
BitBlt
CreateDIBSection
CreateDIBitmap
CreateSolidBrush
StretchDIBits
CreateFontA
SelectObject
SelectPalette
SetBkMode

winmm

timeGetTime
timeSetEvent

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b728abbd8a580d62834f3d101bef365

Headers

File Characteristics

Imports

advapi32

shlwapi

kernel32

shell32

user32

version

wininet

setupapi

gdiplus

ole32

gdi32

winmm

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 71KB - Virtual size: 71KB

.tls Size: 1024B - Virtual size: 368KB

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 71KB - Virtual size: 71KB

.tls
Size: 1024B - Virtual size: 368KB