adeb7b4b9bf5cb243ca0dc929ac40c83_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

adeb7b4b9bf5cb243ca0dc929ac40c83_JaffaCakes118
Size

368KB
MD5

adeb7b4b9bf5cb243ca0dc929ac40c83
SHA1

1b9aeb5402e339b8e1e34e6fb7cacbc10b7f7f42
SHA256

c996679ef4a3fe3ed265d6d7459f25665db12f50f53e4002c1b318bd2fd66a17
SHA512

5236cf2474dbafbfb882495696a7c173e10be3d72dc690c2b13b6b9cc22d855a197e2323c45f78835d0f547ac658b5ab03dfe7654cee06f795dc20ad35ea0f80
SSDEEP

6144:MtxSImZdyf/TLFvN6G/Xkyi6O/OYmQbfTBNl7DAOlQAocQZY:MtxJUdyf/TZEG/3iWYmQrTTl7D2cQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adeb7b4b9bf5cb243ca0dc929ac40c83_JaffaCakes118

Files

adeb7b4b9bf5cb243ca0dc929ac40c83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ebe3be139cce14efe8494fb6cbd4bbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FindResourceA
GetFileSize
CreateFileA
GetModuleFileNameA
WinExec
TerminateProcess
Sleep
GetSystemDirectoryW
WideCharToMultiByte
DeleteFileW
SearchPathA
GetShortPathNameA
MultiByteToWideChar
GetLastError
CreateMutexW
CreateEventW
WaitForSingleObject
OpenEventW
ExitThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
ReadFile
GetModuleHandleA
LockResource
LoadLibraryA
GetModuleHandleW
SizeofResource
GetTickCount
LoadLibraryExW
CreateFileW
ExitProcess
WriteFile
GetProcAddress
CloseHandle
LoadResource
GetModuleFileNameW
AllocateUserPhysicalPages
GetShortPathNameW
CreateJobObjectW
SearchPathW
SetEvent
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
RtlUnwind
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetHandleCount

user32

UpdateWindow
GetDC
SetTimer
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetClientRect
CreateWindowExW
DrawTextW
GetWindowDC
ReleaseDC
ShowWindow
ExitWindowsEx
SetDlgItemTextA
GetDesktopWindow
GetWindowRect
SetWindowLongW
DialogBoxParamW
CreateWindowExA
GetWindowLongA
GetMessageW
TranslateMessage
DispatchMessageW

gdi32

SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

wininet

InternetCrackUrlW

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ebe3be139cce14efe8494fb6cbd4bbe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

rpcrt4

wininet

Sections

.text Size: 274KB - Virtual size: 274KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 41KB - Virtual size: 49KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 274KB - Virtual size: 274KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 41KB - Virtual size: 49KB

.rsrc
Size: 512B - Virtual size: 16B