a43fec6f8c3ac8b4e4ec33ed94012df5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a43fec6f8c3ac8b4e4ec33ed94012df5_JaffaCakes118
Size

188KB
MD5

a43fec6f8c3ac8b4e4ec33ed94012df5
SHA1

01840b26362488f3d30e734ad014449c42051e77
SHA256

7a3c423a2f8fa01107ae49ef8b02afd04f2ebbf5bbdc98601f3923c14c324542
SHA512

3d3926872b955e6a8e37943cc3dddb1654df289a502ba2e1e2f5001ab1b1181703a24f79dc552b12dc6bef1ef5237030b44498c6ac418057de46e71908a95128
SSDEEP

3072:Yh8I/xXog0Jpg9KV2mXye60C+TMcXk2SE1C86UQfyuV8lIR//AXzA:YXopFV2uyH+IcXkZE1LtuV8lIZ/AjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43fec6f8c3ac8b4e4ec33ed94012df5_JaffaCakes118

Files

a43fec6f8c3ac8b4e4ec33ed94012df5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad1638afc2319721a4701418eb3ae421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapReAlloc
RtlUnwind
HeapAlloc
GetStringTypeA
GetStringTypeW
GetSystemTime
GetLastError
MulDiv
LoadLibraryA
lstrcpynW
lstrcpyW
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
lstrlenW
lstrlenA
GetModuleFileNameA
SetConsoleCtrlHandler

user32

GetDoubleClickTime
SetDoubleClickTime
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
WindowFromPoint
GetWindowDC
DrawCaption
OffsetRect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawTextA
GetSysColorBrush
FillRect
SetWindowRgn
GetDC
GetSystemMenu
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetSystemMetrics
GetWindowRect
GetCursorPos
SetRect
IntersectRect
SetRectEmpty
GetFocus
LoadBitmapA
CreateCaret
LockWindowUpdate
ShowCaret
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos

gdi32

GetTextExtentPoint32A
ExtTextOutA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkMode
DeleteObject
TextOutA
CreateEllipticRgn
GetDeviceCaps
CreateRectRgn
GetRgnBox
CreateFontA

advapi32

IsValidSid
GetUserNameA

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad1638afc2319721a4701418eb3ae421

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 140KB - Virtual size: 139KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 140KB - Virtual size: 139KB