964b03b3f0256929b222ead9c7aedf7a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

964b03b3f0256929b222ead9c7aedf7a_JaffaCakes118
Size

95KB
MD5

964b03b3f0256929b222ead9c7aedf7a
SHA1

4c2d1de708085a3b79f19e57215c46b25ae34afa
SHA256

5ee689b922d1efa0fa16e96b3c55871f954f906b4e6c0d71b7da95fef68d9c58
SHA512

65505c36ea6ed6263eea3eee70c7e5d77aac37d06272ce916841a5bc10191168b619a562fa5916ca3d27038c37c4607cc22068b3cddebf1a9c79e6ca4b78b795
SSDEEP

1536:Nld3fKrZHk4jCgOMz7F+RtfGSZl7nuxy+LOT6YUiGuRra5bldx3A3d:JcXCbM3MRhZlruxyuS/Ibl33AN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964b03b3f0256929b222ead9c7aedf7a_JaffaCakes118

Files

964b03b3f0256929b222ead9c7aedf7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afd5fbca29962a2b47a4878581b28422

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

lz32

LZCopy
LZClose
LZOpenFileA

winmm

mciSendStringA

msvcr80

__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_strupr
_itoa
_strnicmp
__argc
__argv
strncpy
strtok
strstr
fgets
ferror
memset
fclose
strncat
fputs
fopen
free
malloc

advapi32

RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey

gdi32

DeleteObject
TextOutA
BitBlt
SelectObject
CreateCompatibleDC
GetStockObject
DeleteDC

kernel32

TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
GetCurrentProcess
GetWindowsDirectoryA
GetProfileStringA
GetSystemDirectoryA
WinExec
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedExchange

user32

TranslateMessage
LoadIconA
DefWindowProcA
DestroyWindow
PostQuitMessage
EndPaint
BeginPaint
SendMessageA
MessageBoxA
WinHelpA
DispatchMessageA
GetMessageA
SetFocus
UpdateWindow
ShowWindow
LoadBitmapA
CreateWindowExA
RegisterClassA
LoadCursorA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

afd5fbca29962a2b47a4878581b28422

Headers

File Characteristics

Imports

lz32

winmm

msvcr80

advapi32

gdi32

kernel32

user32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.4rdata Size: 68KB - Virtual size: 68KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.4rdata
Size: 68KB - Virtual size: 68KB