a2b3531ab5f0203b5a973f2d9d60e816_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a2b3531ab5f0203b5a973f2d9d60e816_JaffaCakes118
Size

7.4MB
MD5

a2b3531ab5f0203b5a973f2d9d60e816
SHA1

216f33b095befbd3dc328e891dab057920864312
SHA256

42a3087111dc06b26da69cae7bbd5dfe109fe161311101ef4ea9e8bf4a6a0dcf
SHA512

96bc4422e57121370015b4a1852806d6d9cd62c0396608c0340b5a7dfafb4fbfead6f1a0ee40f41e5d2914bdcdfb400ca9955291d1825cff8de461588bf41d26
SSDEEP

196608:PSijy2T5uq7AA70oBkyzc02UPua00YZ7cTMU4bv916T5c:PSiFhUA76yz4UhxYZoMUY9MT5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b3531ab5f0203b5a973f2d9d60e816_JaffaCakes118

Files

a2b3531ab5f0203b5a973f2d9d60e816_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e121556920f520c8e3de2019f324987

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetStringTypeExW
GetUserDefaultLCID
GlobalUnlock
GetLogicalDriveStringsA
GetCommandLineW
GetVolumeInformationW
SetCommTimeouts
GetSystemTimeAsFileTime
GetDriveTypeW
FormatMessageA
ReadConsoleOutputA
CreateFileW
FatalAppExitA
OpenFile
DuplicateHandle
WriteConsoleOutputCharacterA
PurgeComm
ReleaseSemaphore
GetNumberFormatW
CreateEventA
EnumSystemCodePagesA
GetProfileIntA
MoveFileW
SetFileAttributesA
GetHandleInformation
GetTapeStatus
VirtualAlloc
EndUpdateResourceA
GetShortPathNameA
CreatePipe
GlobalFindAtomA
GetConsoleMode
SetFileTime
GlobalAddAtomA
LoadResource
PulseEvent
CreateMutexW
GetDriveTypeA
GetModuleFileNameW
GetLongPathNameA
IsBadWritePtr
ExitProcess
FormatMessageW
WaitNamedPipeA
GetFullPathNameA
CompareStringA
DeleteCriticalSection
GetDiskFreeSpaceW
DebugBreak
GetModuleHandleA
MoveFileExA
GlobalDeleteAtom
SetConsoleWindowInfo
GetSystemDefaultLangID
RemoveDirectoryA
_lopen
SetEnvironmentVariableW
SetCurrentDirectoryA
GetCurrentProcess
ExpandEnvironmentStringsW
GetProfileStringA
SetMailslotInfo
GetPrivateProfileSectionW
VirtualLock
FlushFileBuffers
GetLargestConsoleWindowSize

user32

EnumDesktopWindows
SendMessageW
SetUserObjectSecurity
GetCaretPos
GetClassInfoExW
GetDlgItemTextW
CopyAcceleratorTableW
GetMenuStringA
CreateWindowExA
SetWindowLongA
CopyImage
OpenClipboard
GetMenuItemInfoA
DefDlgProcW
UnhookWindowsHook
MessageBeep
EnumDesktopsW
MessageBoxA
MapVirtualKeyA
SetDlgItemTextA
ShowCursor
GetTopWindow
GetWindowPlacement
GetWindowThreadProcessId
DialogBoxParamW
ModifyMenuA
TranslateMessage
CharNextA
GetClipboardOwner
SetWindowPos
GetMonitorInfoA
LoadIconA
CharUpperBuffA
CreateDesktopW
EnableScrollBar
CreatePopupMenu
LoadMenuIndirectW
GetMenuState
DrawMenuBar
RegisterClassA
CharNextExA
DrawTextA
TileWindows
GetUpdateRect
PtInRect
ChildWindowFromPointEx
CharLowerW
OpenIcon
wvsprintfA
CharLowerBuffA
GetShellWindow
SetActiveWindow
ShowScrollBar
EnumThreadWindows
SetWindowRgn
RegisterClassExA
SetProcessWindowStation
DefMDIChildProcA
SendDlgItemMessageA
DispatchMessageA
MessageBoxExA
GetWindowInfo
GetSubMenu
HideCaret
LookupIconIdFromDirectory
SetCapture

gdi32

SetWinMetaFileBits
StartPage

comdlg32

FindTextW
ReplaceTextW

advapi32

GetSidLengthRequired
GetSidIdentifierAuthority
LookupAccountNameA
StartServiceW
SetSecurityDescriptorDacl
GetCurrentHwProfileW
RegLoadKeyW
RegCloseKey
BuildTrusteeWithSidW
CreateServiceW
LookupPrivilegeValueW
SetSecurityDescriptorSacl
QueryServiceConfigA
AccessCheckAndAuditAlarmA
AdjustTokenPrivileges
QueryServiceObjectSecurity
LookupAccountNameW
FreeSid
RegisterServiceCtrlHandlerA
AllocateAndInitializeSid

shell32

Shell_NotifyIconW
ExtractIconExW
SHGetSpecialFolderPathA
SHGetSettings
SHFileOperationA

ole32

CoMarshalInterThreadInterfaceInStream
CLSIDFromString
OleCreateLink
CoInitializeEx
CreateOleAdviseHolder
OleCreate
OleInitialize
OleBuildVersion
ReadClassStm
OleRegGetMiscStatus

comctl32

PropertySheetA
CreatePropertySheetPageW

shlwapi

PathIsSameRootW
StrRChrA
PathIsDirectoryA
StrRetToBufW
PathIsUNCA
UrlCombineW
AssocQueryKeyW
PathFindFileNameA
StrRetToStrW
PathIsUNCW
PathRemoveBlanksA
StrChrIA
PathRenameExtensionW
PathAddBackslashW
SHGetValueA
SHDeleteKeyW
PathIsFileSpecA
PathRemoveArgsW

msvcrt

_strupr
getenv
_kbhit
__p___argc
_fullpath
_wfsopen
memmove
_wcsicmp
_ecvt
_ltoa
_mbsnbcmp
_finite
floor
sscanf
_write
strncpy
fgetc
setvbuf
_strtime
vfprintf
isalnum
strtoul
_unlink
_memicmp
fputws
strftime
_filelength
fwprintf
frexp
qsort
localeconv
_ui64tow
_stricoll
wcstombs
_c_exit
_strlwr
bsearch
_wfreopen
fread
_mbsupr
_wgetcwd
realloc
difftime
isxdigit

Sections

.text
Size: 4KB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e121556920f520c8e3de2019f324987

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

shlwapi

msvcrt

Sections

.text Size: 4KB - Virtual size: 7.3MB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 7.3MB - Virtual size: 7.3MB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 4KB - Virtual size: 7.3MB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 7.3MB - Virtual size: 7.3MB

.rsrc
Size: 68KB - Virtual size: 66KB