a6e491e8a1c5446107ab84f210ba6513_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6e491e8a1c5446107ab84f210ba6513_JaffaCakes118
Size

3.2MB
MD5

a6e491e8a1c5446107ab84f210ba6513
SHA1

dde2a8822529501830d1f46d80b7bc46af81b0a8
SHA256

fb1e3f6d1e22f2935a8182b151402926afb2a596a510b4b68ab37beee7ed41ed
SHA512

d77aca252ec00e67778abaaff0999f00abe152fb517a9371a0ce5b213ffe3dc5bdf54e481548a746878fa27239e2000e0863dcd72f9719daff376b75bbd86ba1
SSDEEP

49152:LffQjBlTzZkKCPyawjI5aLLE+wyYdj63d4aMiJb2SbDDy3HPSGShx96S7k11M2+K:Lf4Bl3jbgsMiJb2SH0KaMpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6e491e8a1c5446107ab84f210ba6513_JaffaCakes118

Files

a6e491e8a1c5446107ab84f210ba6513_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05079a89ad0b3776f06ee357a8f72488

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

gdi32

CreateCompatibleDC
CreateDIBSection
CreateFontA
CreateFontIndirectA
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
SelectObject
SetBkMode
SetTextColor
TextOutA

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadWritePtr
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalFree
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
SetLastError
ResumeThread
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetStdHandle
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile

ole32

CoInitialize

oleaut32

VariantClear

shell32

SHCreateDirectoryExA
SHGetFolderPathA
ShellExecuteA

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
ChangeDisplaySettingsA
ClientToScreen
CloseClipboard
CreateCaret
CreateCursor
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawTextExA
EmptyClipboard
EndDialog
EndPaint
EnumDisplaySettingsA
EnumWindows
FillRect
GetActiveWindow
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDlgItem
GetMessageA
GetSysColorBrush
GetSystemMetrics
GetWindowInfo
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
HideCaret
IsIconic
IsWindowVisible
LoadCursorA
LoadIconA
LoadImageA
MessageBoxA
MessageBoxW
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowTextA
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
TranslateMessage
WindowFromPoint

winmm

PlaySound
mixerClose
mixerGetControlDetailsA
mixerGetDevCapsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails
timeBeginPeriod
timeEndPeriod
timeGetTime

wsock32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
closesocket
connect
gethostbyname
htons
inet_addr
ioctlsocket
recv
select
send
socket

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 839KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05079a89ad0b3776f06ee357a8f72488

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

shell32

user32

winmm

wsock32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 384KB - Virtual size: 380KB

.data Size: 56KB - Virtual size: 839KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 384KB - Virtual size: 380KB

.data
Size: 56KB - Virtual size: 839KB

.rsrc
Size: 16KB - Virtual size: 14KB