a887e48e5ada65c467d91b6caf122a9d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a887e48e5ada65c467d91b6caf122a9d_JaffaCakes118
Size

248KB
MD5

a887e48e5ada65c467d91b6caf122a9d
SHA1

b4192602a511ce3b9aa68b5f1a0193222183159f
SHA256

b617e2006ffa5ad8b77399d4ca87387413128e437d701d680ac8a6a1815d312c
SHA512

6bbdeb6d3ec838c703fd0a508b3dac8c5a27632040d7f009894dab8d4046eb5fa795a148ced726079651fa92d194c2de363d915fd1483044c6ae344bd76cd8c3
SSDEEP

3072:OsBCkY/VGDJinxTnw7j3vXdlfMJONgN8f1ahk5+TTfMcavQCh59KS3Q8IC:O22KixLw77vXf6N2aK+T7juR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a887e48e5ada65c467d91b6caf122a9d_JaffaCakes118

Files

a887e48e5ada65c467d91b6caf122a9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

169f0756e985ecd5266b1c45ac709fee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_chdrive
_chdir
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_ftol
strcpy
atof
abs
srand
strcat
memmove
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_strnicmp
atol
strcmp
strtok
strncpy
??2@YAPAXI@Z
printf
atoi
strcspn
strlen
memcmp
isdigit
malloc
_itoa
_strupr
_strlwr
_strcmpi
_ltoa
_stricmp
_chmod
memchr
realloc
strrchr
strchr
sscanf
memcpy
strncmp
free
rand
sprintf
time
_access
strstr
strncat
__CxxFrameHandler
memset
??3@YAXPAX@Z
_rmdir

shfolder

SHGetFolderPathA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString

oleaut32

SysFreeString
GetErrorInfo
VariantClear
VariantInit
SysAllocString

kernel32

SetEvent
ResetEvent
GetVersionExA
FreeResource
GetTempFileNameA
TerminateProcess
GetCurrentProcess
CreateDirectoryA
MultiByteToWideChar
FormatMessageA
GetWindowsDirectoryA
GetProcAddress
WaitForSingleObject
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateEventA
OutputDebugStringA
CloseHandle
InterlockedDecrement
lstrcpyA
SetLastError
lstrlenA
Sleep
CopyFileA
GetLastError
DeleteFileA
ExitThread
lstrcmpiA
GetModuleFileNameA
ReadFile
CreateFileA
RemoveDirectoryA
lstrcmpA
lstrcpynA
GetFileSize
WriteFile
SetFilePointer
GetModuleHandleA
GetTickCount
WideCharToMultiByte
lstrlenW
GetTempPathA
CreateProcessA
OpenProcess
GetCurrentProcessId
GetLocalTime
CreateThread
FreeLibrary
LoadLibraryA
FindResourceA
GetStartupInfoA
SizeofResource
LoadResource
lstrcatA
LockResource
GetSystemDirectoryA

user32

SetWindowLongA
IsWindow
PostMessageA
FindWindowA
CharLowerA
CharUpperA
MessageBoxA
GetActiveWindow
DestroyWindow
KillTimer
GetDC
ReleaseDC
ScreenToClient
BeginPaint
EndPaint
InvalidateRect
LoadImageA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
CreateDialogParamA
ShowWindow
SetForegroundWindow
ReleaseCapture
GetParent
LoadMenuA
GetCursorPos
TrackPopupMenuEx
DestroyMenu
SetFocus
GetAsyncKeyState
GetMenu
GetSubMenu
DeleteMenu
InsertMenuA
EnableMenuItem
GetWindowTextA
RedrawWindow
EnableWindow
GetWindowLongA
CallWindowProcA
GetDlgItemTextA
GetWindow
IsIconic
LoadStringA
SetDlgItemTextA
SystemParametersInfoA
SetTimer
FillRect
DialogBoxParamA
EndDialog
SetWindowTextA
LoadIconA
GetClientRect
GetDlgItem
IsWindowVisible
SendMessageA
SetCapture
PeekMessageA
GetWindowThreadProcessId
GetSystemMetrics
GetDlgCtrlID
GetWindowRect
SetWindowPos

gdi32

RealizePalette
StretchBlt
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
CreateFontA
SetTextColor
CreateSolidBrush
SetBkColor
DeleteObject
SelectPalette
CreatePalette
GetDIBColorTable

shell32

ShellExecuteA
Shell_NotifyIconA

urlmon

URLDownloadToFileA

wininet

InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCloseHandle
InternetSetStatusCallback
InternetOpenUrlA
InternetQueryDataAvailable

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

RegDeleteValueA
CryptReleaseContext
CryptEncrypt
CryptDeriveKey
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
CryptHashData
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptAcquireContextA
CryptDecrypt
OpenProcessToken
RegSetValueExA
RegQueryValueExA
RegConnectRegistryA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey

Sections

pec1
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

169f0756e985ecd5266b1c45ac709fee

Headers

File Characteristics

Imports

msvcrt

shfolder

ole32

oleaut32

kernel32

user32

gdi32

shell32

urlmon

wininet

version

advapi32

Sections

pec1 Size: 156KB - Virtual size: 156KB

.rsrc Size: 84KB - Virtual size: 84KB

.rsrc Size: 4KB - Virtual size: 4KB

pec1
Size: 156KB - Virtual size: 156KB

.rsrc
Size: 84KB - Virtual size: 84KB

.rsrc
Size: 4KB - Virtual size: 4KB