a7fad941cd162371121470be65e92a1c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a7fad941cd162371121470be65e92a1c_JaffaCakes118
Size

28KB
MD5

a7fad941cd162371121470be65e92a1c
SHA1

ba65deb8cfe022555d50b3d562b67849334ee1a7
SHA256

99c0cd489f0d9f0540f72d7669c352d7f8b11c48c09eeaf82a1fe934621a53f6
SHA512

592b414d9ebda1f2b00c0e39611564cb1f541ef21a272074aeea5e21aefcddc6bd6bb21d218469e2350080b2fe7ce87421d56ec83cd9ced01baa35d718931115
SSDEEP

768:Z4rJ1rFMI2SjK1RGy2GrT08rj8CjSwwGSbEC0lMA:m3pk7HGFitSwkV0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7fad941cd162371121470be65e92a1c_JaffaCakes118

Files

a7fad941cd162371121470be65e92a1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

625d1308d7425cd2c9a38989f9096649

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
SetEvent
EndUpdateResourceW
GetLogicalDriveStringsA
FileTimeToSystemTime
GetThreadLocale
CreateFileW
lstrcatW
GetLongPathNameW
VirtualAlloc
GetProcessHeaps
GetUserDefaultLangID
WinExec
lstrcpynW
ExitThread
GetShortPathNameW
IsValidLocale
CreateMailslotW
CreateMutexW
lstrlen
InitializeCriticalSection
OpenMutexA
GetDateFormatW
CreateSemaphoreW
BeginUpdateResourceA
GetAtomNameA
WriteFile
OpenSemaphoreA
MultiByteToWideChar

user32

wsprintfA
LoadBitmapW
RegisterClassExA
GetCursorPos
SetWindowTextA
LoadBitmapA
CreateDialogIndirectParamA
DialogBoxIndirectParamW
ReleaseDC
SendDlgItemMessageA
InsertMenuItemW
ShowCursor
DestroyWindow
SetTimer
EnumDesktopsW
EnumChildWindows
SetWindowPos

gdi32

EnumICMProfilesW
GetCharWidthFloatA
GetTextExtentPointA
SetICMMode
SetMetaFileBitsEx
OffsetRgn
SetTextJustification
GetMetaFileBitsEx
GetDIBColorTable
DescribePixelFormat
GetDCOrgEx
GetBoundsRect

advapi32

RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegDeleteValueW

shlwapi

PathGetDriveNumberW
AssocQueryStringByKeyW
StrDupA
StrRetToBufW
StrCmpNW
UrlGetPartA
PathFindNextComponentA
AssocQueryStringA
SHRegCloseUSKey
UrlApplySchemeW
SHGetValueW
PathAppendA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.avira
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

625d1308d7425cd2c9a38989f9096649

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.text Size: 10KB - Virtual size: 10KB

.avira Size: 512B - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 33KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 165KB - Virtual size: 165KB

.text
Size: 10KB - Virtual size: 10KB

.avira
Size: 512B - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 33KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 165KB - Virtual size: 165KB