ac940a97ca796f832096409759a94fe9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ac940a97ca796f832096409759a94fe9_JaffaCakes118
Size

171KB
MD5

ac940a97ca796f832096409759a94fe9
SHA1

d2f268d36b1db28d47b189c9acf3dbdb06dd5e63
SHA256

18f3fd12f372cc14d47dbba12f94ee6fb37fa697fa54fcf732b868841f02b35d
SHA512

d2a05ad7fb5b8cfd1480cd707882a3e9c82a89284db6cdf9b2c279b58ce587db2d18ef2b88869e48ffb07a6cc7f1f2a011f6c1d53e0842902b6e9a8df62fb4c3
SSDEEP

3072:vgZaMid+wvyonOw+0hUDTljKjG3UTpTy6X8C96RkcH3SGcv6ZrH4dtpxz9iwLwzw:ocMidDyi+0hgT8G3mpTy6X8C961D94ft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac940a97ca796f832096409759a94fe9_JaffaCakes118

Files

ac940a97ca796f832096409759a94fe9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1dc879f86b0a3cb5e4a37db68fe42c7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState
MessageBoxA
CharNextA
wsprintfW
wsprintfA
CharUpperA
CharLowerA

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

kernel32

GetCurrentProcess
RtlUnwind
HeapDestroy
GetOEMCP
GetSystemTime
WaitForSingleObject
HeapFree
LoadLibraryA
GetThreadIOPendingFlag
CreateSemaphoreA
CreateMutexA
CloseHandle
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringA
FileTimeToLocalFileTime
HeapReAlloc
GetCurrentThreadId
LCMapStringW
SetPriorityClass
FreeEnvironmentStringsA
SetHandleCount
CreateFileW
SetUnhandledExceptionFilter
IsBadReadPtr
GetStdHandle
GetCommandLineA
GetPriorityClass
IsBadCodePtr
TerminateProcess
LCMapStringA
GetEnvironmentStrings
TransmitCommChar
FlushFileBuffers
ExitProcess
FileTimeToSystemTime
RaiseException
UnmapViewOfFile
GetEnvironmentVariableA
GetFullPathNameW
WideCharToMultiByte
GetStringTypeA
HeapAlloc
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
InterlockedIncrement
GetTempFileNameA
SetEndOfFile
GlobalFree
GetFullPathNameA
SetStdHandle
LoadLibraryW
EnumResourceNamesW
WriteFile
GetProcAddress
CompareStringA
GetThreadPriority
CompareStringW
TlsAlloc
lstrcpyA
SetLastError
GetTempPathW
SetEvent
InterlockedExchange
MultiByteToWideChar
GlobalAlloc
ExitProcess
lstrcmpW
IsDBCSLeadByte
ExitThread
GetTimeZoneInformation
GlobalUnlock
GetACP
TlsGetValue
GetDiskFreeSpaceExA
FreeEnvironmentStringsW
IsBadWritePtr
GetStartupInfoA
InitializeCriticalSection
GetUserDefaultLCID
MapViewOfFile
HeapSize
GetPrivateProfileStringA
DeleteCriticalSection
GetModuleFileNameA
CreateThread
GetEnvironmentStringsW
InterlockedDecrement
ReleaseSemaphore
CreateFileMappingA
Sleep
TlsFree
lstrcmpA
ResetEvent
OutputDebugStringA
GetTickCount
GetFileType
GetCPInfo
GetTempPathA
GetStringTypeW
HeapCreate
FreeLibrary
SetEnvironmentVariableA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dc879f86b0a3cb5e4a37db68fe42c7a

Headers

File Characteristics

Imports

user32

shlwapi

msimg32

kernel32

advapi32

Sections

.text Size: 138KB - Virtual size: 137KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 28KB - Virtual size: 28KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 28KB - Virtual size: 28KB

.crt
Size: 512B - Virtual size: 216KB