a772b733f76fbac965db681b7fdcb743_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a772b733f76fbac965db681b7fdcb743_JaffaCakes118
Size

257KB
MD5

a772b733f76fbac965db681b7fdcb743
SHA1

24badb3351cb63500056730138726762fc0b9b8e
SHA256

e5daa3334a7244412065d952b61521da553b98ee3b594d9c7fe22c2219b6bc9e
SHA512

95a00441a971065127a9218baa1bf2d98fddbce49490014f89bb84cf93d2d6e641001b3eb72a2ccbc0265b6018a7b420b9afeced032e0a042f537a7e000c9a94
SSDEEP

3072:kS5jxPLn8bywhaYiwEScQWsEetmvevzzDvOO782xOPVuatnlWb8LirHQAj1U41Gp:9t4i62sE2ZzW9fPV7TWaDAj13IzhUS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a772b733f76fbac965db681b7fdcb743_JaffaCakes118

Files

a772b733f76fbac965db681b7fdcb743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ae54a572129433fede3999134b6a0d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetTempFileNameW
InitializeCriticalSection
WaitForSingleObject
GetCurrentProcess
CreateEventW
GetCurrentThreadId
GetCurrentProcessId
WaitForMultipleObjects
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoA
CreateDirectoryW
Sleep
GetFileAttributesW
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
LoadLibraryW
FreeLibrary
GetTickCount
MultiByteToWideChar
GetVersionExW
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetVersionExA
GetProcessHeap
SetUnhandledExceptionFilter
HeapCreate
ExitProcess
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
RaiseException
GetStartupInfoA
GetEnvironmentStringsW
QueryPerformanceCounter
GetProcAddress

user32

MessageBoxW
PeekMessageW
SendDlgItemMessageA
LoadMenuA
AppendMenuW
MessageBoxIndirectA
ShowCursor
InsertMenuItemW
WinHelpA
GetSystemMetrics
MonitorFromPoint
EnableMenuItem
CreateDialogIndirectParamW
GetFocus
SetWindowRgn
LoadIconA
GetMenu
GetDesktopWindow
GetActiveWindow
SetMenu
GetClassInfoExW
MessageBoxA
DestroyMenu
EnumClipboardFormats
GetScrollPos

advapi32

FreeSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegDeleteKeyA
EqualSid

shell32

ord680
ShellExecuteExW
SHGetDesktopFolder

security

SealMessage
CompleteAuthToken

gdi32

CreateFontIndirectExA
CreateScalableFontResourceW
SelectBrushLocal
AddFontResourceA
GetRasterizerCaps
GetEnhMetaFileA
CreateSolidBrush
CreateBitmapIndirect
CreatePen
AddFontResourceW
GetStockObject
CreateFontIndirectExW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UNeyY
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.P
Size: 1024B - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.C
Size: 103KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EI
Size: 3KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Qxlzm
Size: 120KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ae54a572129433fede3999134b6a0d1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

security

gdi32

Sections

.text Size: 12KB - Virtual size: 12KB

.UNeyY Size: 1024B - Virtual size: 48KB

.rdata Size: 3KB - Virtual size: 31KB

.P Size: 1024B - Virtual size: 137KB

.C Size: 103KB - Virtual size: 121KB

.EI Size: 3KB - Virtual size: 304KB

.data Size: 6KB - Virtual size: 131KB

.Qxlzm Size: 120KB - Virtual size: 142KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 12KB - Virtual size: 12KB

.UNeyY
Size: 1024B - Virtual size: 48KB

.rdata
Size: 3KB - Virtual size: 31KB

.P
Size: 1024B - Virtual size: 137KB

.C
Size: 103KB - Virtual size: 121KB

.EI
Size: 3KB - Virtual size: 304KB

.data
Size: 6KB - Virtual size: 131KB

.Qxlzm
Size: 120KB - Virtual size: 142KB

.rsrc
Size: 7KB - Virtual size: 7KB