b0f773fad79343861e3bed9708ff4c4c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0f773fad79343861e3bed9708ff4c4c_JaffaCakes118
Size

303KB
MD5

b0f773fad79343861e3bed9708ff4c4c
SHA1

38471716b698d1e108e2c6b03c904f43ae458ce6
SHA256

ffd76f2abcdb4cf961837d710ba66733b34dd162981a7098ec4dbdf6aa17e467
SHA512

40bc9ddcec7cddd21608a707bf1eec4e45a7966f7b2db60073071bc7e7370a5d03c87ae3258c4031e48a42251ac95f4351b088e032c2aa9cfd9f553ed6190ba1
SSDEEP

6144:ROuatq9nLtnGR9XACo5TdW+UKaG4JFW/gRVzgUEjRDrviICUw:RO9t6ZnGLX/yZaKP4J02FartJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f773fad79343861e3bed9708ff4c4c_JaffaCakes118

Files

b0f773fad79343861e3bed9708ff4c4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e482690d9d9fb55b364f188bebdc0631

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
LoadLibraryW
GetProcAddress
ReadConsoleA
FreeLibrary
WaitForMultipleObjects
GetCurrentDirectoryA
GetCompressedFileSizeA
FileTimeToDosDateTime
SetNamedPipeHandleState
GetCPInfo
GetBinaryTypeW
RequestWakeupLatency
AddConsoleAliasA
GetProfileStringA
CancelWaitableTimer
DebugBreak
DefineDosDeviceA
GetThreadContext
InitAtomTable
FoldStringA
GetFileTime
GetCPInfoExW
GetConsoleAliasExesLengthA
CancelTimerQueueTimer
EnumTimeFormatsA
GetUserDefaultLangID
GetFileSizeEx
GlobalAlloc
GetPrivateProfileStringW
GetACP
SetFileAttributesA
GetVolumePathNameA
EnterCriticalSection
FindFirstFileExW
CreateEventW
GetEnvironmentVariableW
Process32FirstW
CreateRemoteThread
WaitNamedPipeW
GetTimeZoneInformation
GetCPInfoExA
CreateDirectoryA
GetConsoleOutputCP
FlushConsoleInputBuffer
GetNumberOfConsoleInputEvents
GetConsoleAliasExesLengthW
GetConsoleAliasesA
WaitForSingleObjectEx
GetTimeFormatW
SetThreadLocale
_lwrite
InterlockedExchange
Module32FirstW
SetFileApisToOEM
lstrlen
LoadLibraryExW
WritePrivateProfileSectionW
GlobalDeleteAtom
GlobalHandle
GetConsoleAliasesW
EnumResourceTypesA
SetLocaleInfoA
GetTimeFormatA
DuplicateHandle
VerifyVersionInfoW
SetConsoleMode
GetCompressedFileSizeW
lstrcatW
WriteProfileSectionW
WriteConsoleInputA
EnumUILanguagesA
LockFile
GetCommState
FreeEnvironmentStringsW
WriteConsoleOutputW
_lopen
GetShortPathNameA
EnumLanguageGroupLocalesW
ResetWriteWatch
SetCommTimeouts
ReadConsoleOutputAttribute
EnumSystemCodePagesA
GetConsoleWindow
GetSystemInfo
FindFirstVolumeA
VerifyVersionInfoA
CompareFileTime
GetLongPathNameW
GetDiskFreeSpaceW
FindFirstFileA
VerLanguageNameA
lstrcmpA
PeekConsoleInputA

user32

LoadCursorA
mouse_event
InsertMenuA
GetClipboardOwner
RegisterDeviceNotificationW
GetQueueStatus
GetClipboardViewer
SetWindowPos
WINNLSGetIMEHotkey
SendNotifyMessageA
OemToCharA
GetPropA
GetThreadDesktop
GetAltTabInfoW
InsertMenuW
MonitorFromWindow
EndPaint
CloseWindowStation
CharNextW
SetWindowPlacement
BringWindowToTop
CallMsgFilter
GrayStringW
GetUserObjectInformationA
CharPrevW
GetScrollRange
DestroyWindow
SendMessageA
NotifyWinEvent
DrawEdge
DlgDirSelectExW
GetSysColor
UnloadKeyboardLayout
RealGetWindowClass
CharLowerW
DdeInitializeW
SendMessageCallbackA
ShowWindowAsync
GetWindowTextLengthA
IMPQueryIMEA
MessageBeep
LoadStringW
OpenWindowStationA
ChangeMenuA
GetKeyboardLayoutNameA
SetProcessWindowStation
GetCursor
GetClipboardSequenceNumber
ArrangeIconicWindows
LoadCursorFromFileA
ImpersonateDdeClientWindow
SetParent
ShowScrollBar
UnpackDDElParam
RegisterWindowMessageA
DestroyIcon
InvalidateRect
OemToCharW
GetLastActivePopup
GetDCEx
MoveWindow
GetMenuItemRect
CharLowerBuffW
GetMenuDefaultItem
MapDialogRect
GetKeyboardState
LoadImageW
LoadBitmapW
SetMenuItemInfoA
VkKeyScanA
SetClipboardData
GetMessageA
ChangeClipboardChain
DdeFreeDataHandle
GetClipboardFormatNameW
SetWindowLongA
SetClassLongA
IsIconic
DefWindowProcW
PostThreadMessageA
ReleaseCapture
LoadImageA
DialogBoxParamW
TrackPopupMenu
GetWindowPlacement
IsDialogMessageA
DefDlgProcW
GetDesktopWindow
CharUpperBuffA
ScrollWindowEx
DlgDirSelectComboBoxExA
CloseWindow
GetMenuItemInfoW
DdeUninitialize
FindWindowA
wvsprintfA
SendIMEMessageExA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

shell32

SHEmptyRecycleBinA
ShellExecuteW
SHGetFolderPathA
DragQueryFile
DragQueryFileA
SHLoadNonloadedIconOverlayIdentifiers
ExtractAssociatedIconA
SHBrowseForFolderA
ExtractIconExA
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceA
SHCreateDirectoryExW
FindExecutableA
SHCreateDirectoryExA
SHGetIconOverlayIndexW
SHCreateProcessAsUserW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHBrowseForFolderW
SHGetDesktopFolder
SHBrowseForFolder
SHGetPathFromIDListW
SHGetSettings
SHGetFolderPathW
SHGetDiskFreeSpaceExW
SHAppBarMessage
SHGetDataFromIDListW
ShellExecuteExW
ExtractIconW
SHPathPrepareForWriteW
DuplicateIcon
SHGetPathFromIDListA
DragFinish

shlwapi

StrStrIW
StrRChrA
StrStrW

Sections

.text
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e482690d9d9fb55b364f188bebdc0631

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 290KB - Virtual size: 289KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 968B

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 290KB - Virtual size: 289KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 968B

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB