8d28d4a595126192c3f159cb875837d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d28d4a595126192c3f159cb875837d2_JaffaCakes118
Size

276KB
MD5

8d28d4a595126192c3f159cb875837d2
SHA1

b3c5f19dc15f2e6aa150edcf42c0bdb8a99a9632
SHA256

9913544b0aa90d249e347b7ea8f1e68e683784074850462837ef454e0437978f
SHA512

3f525b012dd39494a02df82c3a6f71b570e37283dbe5a803a21635bdd4f6712c79d138f17ddb1adb88d24f9a69db1b711f6383d7954f30915cbae55354a3d3f9
SSDEEP

6144:QxEWado6FopCNzA1wGz53uq7TPidip46eWzbDwG9a69jEbXRoK7P3:QxEWaddgCNzACG13jT4NiIUa5DRoKL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d28d4a595126192c3f159cb875837d2_JaffaCakes118

Files

8d28d4a595126192c3f159cb875837d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
DeleteFileW
GetLogicalDrives
GetDriveTypeW
CreateEventW
GetUserDefaultLangID
GetProcAddress
MultiByteToWideChar
lstrcpyW
Sleep
LoadLibraryW
QueryDosDeviceW
TerminateThread
SetEndOfFile
GlobalAddAtomW
ExitProcess
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
CreateThread
ResetEvent
SetCurrentDirectoryW
CreateFileW
FindFirstChangeNotificationW
LockResource
FindFirstFileW
MoveFileW
ReadProcessMemory
InterlockedIncrement
GetModuleHandleW
CreateProcessW
GlobalLock
FileTimeToSystemTime
GetFileAttributesW
MulDiv
GetCurrentProcessId
SetWaitableTimer
DuplicateHandle
GlobalDeleteAtom

user32

UpdateWindow
SetDlgItemTextW
GetWindowRect
OffsetRect
GetDlgItem
GetWindowTextW
SetCapture
IsWindow
SystemParametersInfoW
DispatchMessageW
SetWindowPos
PostMessageW
ReleaseCapture
MessageBoxW
RedrawWindow
RegisterWindowMessageW
TrackPopupMenu
GetSystemMetrics
DestroyMenu
GetKeyState
VkKeyScanW
LoadIconW
SetForegroundWindow
SetCursorPos
GetSysColor
WindowFromPoint
wsprintfW
FillRect
SetLayeredWindowAttributes

gdi32

CreateICW
CreateCompatibleBitmap
SetDIBits
SetBkMode
CreateDCW
CreateSolidBrush
CreateRoundRectRgn
DPtoLP
SetTextColor
CreateCompatibleDC
GetObjectW
CreateBitmap

advapi32

RegQueryValueExW
RegDeleteValueW
LookupAccountSidW
GetUserNameW
RegOpenKeyExW
RegCreateKeyExW

shell32

SHChangeNotify

oleaut32

SysFreeString

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 6KB