a62de663ecfea38fe76a182ee595b12a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a62de663ecfea38fe76a182ee595b12a_JaffaCakes118
Size

260KB
MD5

a62de663ecfea38fe76a182ee595b12a
SHA1

1fda51bcb6a73f246d63094280eb09a169722fa0
SHA256

bec4ff5b06cd623575180d616a4556dfdeb8858dea36efa37f9c77a15b12f4f0
SHA512

c4c02e536b6037d2bfb61a3089b2dbeb1f78faf02d596284a9d721f92bd9128ea96ad051b2fd2f2810cd074770cba8eb64c228924408b8fe638a9e722c6a4ae9
SSDEEP

3072:3fYukiVMDdJsi6EV6VcyXF+gNGwiVMlbWWl4J8pgJ0Mca/YzBlYDVQzp8:PRZV662yXzNm4bWWNpgJ0jqYzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a62de663ecfea38fe76a182ee595b12a_JaffaCakes118

Files

a62de663ecfea38fe76a182ee595b12a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

234ba6fc8a3463635e1720efa5371065

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

msvcrt

??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_strnicmp
_CxxThrowException
strcat
strcmp
strncpy
srand
abs
atol
strcpy
_ftol
strchr
__dllonexit
_onexit
strrchr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
strcspn
__p__commode
_adjust_fdiv
memmove
atoi
_chdrive
_chdir
realloc
memchr
_ltoa
_itoa
malloc
memcpy
strncmp
free
rand
??2@YAPAXI@Z
strlen
isdigit
sprintf
time
_access
strstr
strncat
__CxxFrameHandler
memset
??3@YAXPAX@Z
sscanf
__setusermatherr
_chmod
_strlwr
_strcmpi
_stricmp

ole32

CoUninitialize
CoInitializeEx
CLSIDFromString
OleRun
CoCreateInstance

kernel32

FindClose
InterlockedDecrement
MultiByteToWideChar
CreateDirectoryA
GetCurrentProcess
TerminateProcess
GetTempFileNameA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcatA
lstrcpyA
SetLastError
lstrlenA
Sleep
CopyFileA
GetLastError
DeleteFileA
lstrcmpiA
GetModuleFileNameA
CloseHandle
ReadFile
CreateFileA
RemoveDirectoryA
lstrcmpA
lstrcpynA
GetFileSize
WriteFile
GetModuleHandleA
GetTickCount
GetVersionExA
GetTempPathA
CreateProcessA
OpenProcess
GetCurrentProcessId
FileTimeToSystemTime
CreateThread
ExitThread
GetLocalTime
FreeLibrary
LoadLibraryA
GetProcAddress
FindNextFileA
FileTimeToLocalFileTime
FindFirstFileA
GetSystemDirectoryA
GetStartupInfoA
CreateEventA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
WaitForSingleObject
GetWindowsDirectoryA
SetEvent
ResetEvent

user32

RedrawWindow
IsWindow
PostMessageA
FindWindowA
CharLowerA
CharUpperA
MessageBoxA
GetActiveWindow
DestroyWindow
KillTimer
ReleaseDC
IsIconic
ScreenToClient
CreateDialogParamA
ShowWindow
SetForegroundWindow
ReleaseCapture
GetParent
GetWindowRect
GetDC
IsWindowEnabled
BeginPaint
EndPaint
InvalidateRect
LoadImageA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
DispatchMessageA
GetDesktopWindow
LoadMenuA
GetCursorPos
GetSubMenu
TrackPopupMenuEx
DestroyMenu
EnableWindow
SetFocus
EnableMenuItem
GetAsyncKeyState
GetWindowTextA
TranslateMessage
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItemTextA
LoadStringA
SetDlgItemTextA
SetTimer
DialogBoxParamA
EndDialog
SetWindowTextA
LoadIconA
PeekMessageA
FlashWindow
GetWindowThreadProcessId
GetDlgCtrlID
GetSystemMetrics
GetClientRect
GetDlgItem
SetWindowPos
IsWindowVisible
SendMessageA
SetCapture

gdi32

DeleteObject
SetTextColor
CreateFontA
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
TextOutA
SetBkMode
SetTextAlign
StretchBlt
GetObjectA
RealizePalette
SelectPalette
CreatePalette
GetDIBColorTable
GetDeviceCaps

shell32

ShellExecuteA
Shell_NotifyIconA

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA

wininet

InternetOpenA
InternetGetConnectedState
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
GetErrorInfo

advapi32

CryptReleaseContext
InitiateSystemShutdownA
CryptDecrypt
CryptAcquireContextA
CryptDestroyKey
CryptDestroyHash
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegConnectRegistryA

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

234ba6fc8a3463635e1720efa5371065

Headers

File Characteristics

Imports

shfolder

msvcrt

ole32

kernel32

user32

gdi32

shell32

urlmon

wininet

version

oleaut32

advapi32

Sections

.text Size: 236KB - Virtual size: 236KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 236KB - Virtual size: 236KB

.rsrc
Size: 20KB - Virtual size: 20KB