a46c76eeedd10a931fc1fad0b7acbe94_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a46c76eeedd10a931fc1fad0b7acbe94_JaffaCakes118
Size

168KB
MD5

a46c76eeedd10a931fc1fad0b7acbe94
SHA1

f2606dbfa1306d291467960de797f4bf99269812
SHA256

0ad9d305f0f09cb3e2b55ffdb37714302ee6c7d464f44541c7025705140fc9e4
SHA512

523720d59ddad3fd1c8929151c7ee0afbebf20618b26187ec97bf4e48da25397d869d4493fd117b40f77b4996c1141b2c5f5d3d3a83724b35b55d9566897d49d
SSDEEP

3072:IxQ5w7rsXw+j/3zgFR+uouRUYl/fuFxo9lFJUcEs3pSg5DoXw0E:IjsZzgrZomhfuFxoeqSKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a46c76eeedd10a931fc1fad0b7acbe94_JaffaCakes118

Files

a46c76eeedd10a931fc1fad0b7acbe94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18ed598b0f52d3f75d1a20a70b84df00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
SetFilePointer
SystemTimeToFileTime
GetFileAttributesA
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
SetStdHandle
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GlobalLock
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GlobalUnlock
GlobalFree
GetPrivateProfileStringA
FlushFileBuffers
GetCurrentDirectoryA
GetFileSize
FindFirstFileA
lstrcpynA
FindNextFileA
FindClose
GetSystemDirectoryA
GetLocalTime
CreateThread
CreateFileA
WriteFile
ReadFile
CloseHandle
GetModuleHandleA
CreateMutexA
GetLastError
GetTickCount
GetModuleFileNameA
lstrlenA
SetCurrentDirectoryA
ExitProcess
lstrcpyA
lstrcatA
WideCharToMultiByte
Sleep

user32

SetTimer
TranslateMessage
GetClientRect
DestroyMenu
wsprintfA
SetWindowPos
GetMessageA
ShowCaret
TrackPopupMenu
InsertMenuItemA
CreatePopupMenu
CreateMenu
GetDC
ReleaseDC
GetCaretPos
HideCaret
OpenClipboard
GetClipboardData
CloseClipboard
DestroyCaret
SetCaretPos
LoadIconA
DrawTextA
SetRect
FillRect
MessageBoxA
GetCursorPos
PostQuitMessage
ShowWindow
SetForegroundWindow
DefWindowProcA
MoveWindow
SetCapture
ReleaseCapture
LoadCursorA
RegisterClassExA
CreateWindowExA
GetDesktopWindow
GetWindowRect
DispatchMessageA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

winmm

PlaySoundA

gdi32

GetTextExtentPoint32A
CreateFontA
SetTextColor
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SetBkMode
SetBkColor
CreateDIBitmap
CreateCompatibleBitmap
DeleteObject

advapi32

RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18ed598b0f52d3f75d1a20a70b84df00

Headers

File Characteristics

Imports

kernel32

user32

wininet

winmm

gdi32

advapi32

shell32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 42KB

.rsrc Size: 40KB - Virtual size: 38KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 42KB

.rsrc
Size: 40KB - Virtual size: 38KB