a099f3ffaf458a04d6f0ebf35140cbc4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a099f3ffaf458a04d6f0ebf35140cbc4_JaffaCakes118
Size

60KB
MD5

a099f3ffaf458a04d6f0ebf35140cbc4
SHA1

e1e4f6533ecef36b93fd82813915da4f53e89d83
SHA256

891b12b6de7eae908da0d36d7bb814f60358c130180ed62dd8e17c280280e379
SHA512

2d4a2004e388d8f957e6a777c596150fe94b2072abfe355a17007f8628ff4165abc5c129881b354326eb8fb332b78f4cb496714f71587f27aa61daad3eb7b9d8
SSDEEP

768:WtN/hbZGdougv3a4pHVv5J00ne50XNK3XzKDpZqMxGNntEioq:I3kougbne50K3DMU7oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a099f3ffaf458a04d6f0ebf35140cbc4_JaffaCakes118

Files

a099f3ffaf458a04d6f0ebf35140cbc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31b3ce1e169429bc2c42112536537f5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
Sleep
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
CreateThread
CreateMutexA
CompareStringW
CompareStringA
DeleteFileA
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
WritePrivateProfileStringA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
GetPrivateProfileStringA
OpenFile
GetLastError
GetFileSize
CreateFileA
ReadFile
WriteFile
LCMapStringW
CloseHandle
SetUnhandledExceptionFilter
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
FlushFileBuffers
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy

user32

OpenDesktopA
SetThreadDesktop
CloseWindowStation
CloseDesktop
MessageBoxA
PostThreadMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation

advapi32

ReportEventA
DeregisterEventSource
ControlService
DeleteService
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterEventSourceA

shell32

ShellExecuteA

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

netapi32

Netbios

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

31b3ce1e169429bc2c42112536537f5a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

netapi32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 10KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 10KB