a2936f5a0a89f13d11ca54140e7c27c7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a2936f5a0a89f13d11ca54140e7c27c7_JaffaCakes118
Size

224KB
MD5

a2936f5a0a89f13d11ca54140e7c27c7
SHA1

a7ead2fdb544d447666cb6791264652e4cb4ac0b
SHA256

10cfa46f62b104cbdd44870c45b34bfae1dc28e91fb3dc1879ebc4431510b015
SHA512

694e0e6ff65d92c8f39b64755a810677914c59af0125f4c2dfbc7d436d6facf4e944146f7888236744d836d7bebe09cde993b4a1cb93f3d63fe08b16635e8a5a
SSDEEP

3072:hPCLZsn0L0CIdSzA49zYzFJoqFF00lo0BNWLQx7pMvifuWI9LJdZtg86WkUOwsKZ:ULtYCIozA498FFFjAifuWI91r96crYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2936f5a0a89f13d11ca54140e7c27c7_JaffaCakes118

Files

a2936f5a0a89f13d11ca54140e7c27c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8db3bfa1b12626b26b16a8045a7321a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1134
ord2725
ord2575
ord3574
ord5265
ord4998
ord2514
ord6052
ord1775
ord4407
ord5280
ord4425
ord3597
ord1146
ord860
ord641
ord2370
ord2301
ord2302
ord4376
ord4853
ord6334
ord537
ord3337
ord858
ord2582
ord4402
ord3370
ord3640
ord693
ord4243
ord2450
ord2753
ord6762
ord3302
ord6172
ord2754
ord283
ord6675
ord6696
ord6242
ord2862
ord3996
ord3742
ord6442
ord2818
ord3573
ord2645
ord2860
ord3708
ord781
ord6880
ord6199
ord6380
ord686
ord384
ord6907
ord3998
ord1205
ord2380
ord6458
ord6453
ord2096
ord2642
ord939
ord3301
ord818
ord2864
ord755
ord470
ord6877
ord1232
ord2152
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord2915
ord941
ord6215
ord551
ord2614
ord5572
ord2919
ord1644
ord2111
ord1233
ord324
ord4234
ord4710
ord5787
ord472
ord4400
ord3630
ord682
ord4133
ord4297
ord5788
ord5789
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5873
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord6438
ord2621
ord823
ord815
ord561
ord3738
ord4622
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord1576
ord4274
ord609
ord567
ord3572
ord3402
ord2574
ord6197
ord4284
ord5277
ord2078
ord3874
ord5875
ord323
ord2859
ord1640
ord5785
ord640
ord3571
ord2122
ord540
ord4160
ord800
ord5290
ord2379
ord4275
ord1793
ord2414
ord3663
ord3626
ord825
ord556
ord1168
ord1641
ord809
ord3619
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord1776
ord4078
ord2100
ord6055

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
memset
__CxxFrameHandler
_snprintf
??1type_info@@UAE@XZ
_setmbcp
_CxxThrowException
strlen
strcat
_beginthreadex
memcpy
strcpy
time
fwrite
fclose
fread
fopen
_stricmp
_except_handler3
fgets
strrchr
isalpha
isdigit
isspace
_mbscmp
sprintf
strncpy
_strlwr
strncat
strchr
_ftol
atoi
__dllonexit
_onexit
_exit
memcmp

kernel32

SetEvent
WaitForSingleObject
FreeLibrary
CloseHandle
GetModuleFileNameA
CreateMutexA
GetLastError
GetCommandLineA
ResetEvent
EnterCriticalSection
SetProcessWorkingSetSize
OpenProcess
GetCurrentProcessId
DeleteCriticalSection
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
CreateEventA
GetProcAddress
LoadLibraryA
DeleteFileA
GetVersionExA
FindClose
FindFirstFileA
SetFileAttributesA
CopyFileA
GetCurrentProcess
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessA
DeviceIoControl
CreateFileA
Sleep
GetTickCount
GetPrivateProfileStringA
GetPrivateProfileIntA
LeaveCriticalSection
OutputDebugStringA
LocalFree
InitializeCriticalSection

user32

FindWindowA
PtInRect
LoadCursorA
SetCursor
EqualRect
SetClassLongA
GetWindowLongA
GetParent
InflateRect
FrameRect
GetWindowDC
ReleaseDC
PostMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetForegroundWindow
ShowWindow
DefWindowProcA
SetMenuItemInfoA
GrayStringA
DrawTextA
TabbedTextOutA
SystemParametersInfoA
SetWindowPos
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapA
GetSysColor
DrawIconEx
SetWindowLongA
SetLayeredWindowAttributes
SendMessageTimeoutA
SendMessageA
GetClientRect
SetTimer
RegisterWindowMessageA
GetCursorPos
KillTimer
UnregisterClassA
SetMenuDefaultItem
FillRect
GetSubMenu
CopyRect
InvalidateRect
GetWindowRect
EnableWindow
UpdateWindow
GetMenuStringA
LoadMenuA
IsWindow
WaitForInputIdle

gdi32

ExtTextOutA
TextOutA
RectVisible
PtVisible
Rectangle
CreateFontIndirectA
GetStockObject
CreateSolidBrush
GetObjectA
SelectObject
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontA
DeleteObject
Escape

advapi32

GetTokenInformation
RegOpenKeyExA
RegFlushKey
RegCloseKey
RegOpenKeyA
OpenProcessToken

shell32

Shell_NotifyIconA
ShellExecuteExA

comctl32

_TrackMouseEvent
ImageList_Draw

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString

urlmon

URLDownloadToFileA

shlwapi

PathIsDirectoryA
PathFileExistsA
SHGetValueA
SHSetValueA
StrStrIA
SHDeleteValueA
PathAppendA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

Netbios

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cpa
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f8db3bfa1b12626b26b16a8045a7321a

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

urlmon

shlwapi

version

netapi32

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 116KB - Virtual size: 112KB

.cpa Size: 4KB - Virtual size: 2KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 116KB - Virtual size: 112KB

.cpa
Size: 4KB - Virtual size: 2KB