af3f52189585125356d5a035024d3bdc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af3f52189585125356d5a035024d3bdc_JaffaCakes118
Size

132KB
MD5

af3f52189585125356d5a035024d3bdc
SHA1

873dd1e49bcdc9b4e3f54647a718222074d4f0a3
SHA256

6a156ced0462b2e673c839cb010cfbdbdbf525cb1a7201d51ee32d2f5838eb71
SHA512

269897873f98783af94bf35931458cd0f1f71d91ef78f145e403b77e7761e8acd2d25b1bdbf4a0338aaff48828f98d280fb70d9085ab3f6b1d4d5311f6ff402a
SSDEEP

384:flyDlug8LyarpELpA4mlNC4dZy6SPWoXzQaNnrurh6oBX7HpjR:fysfTpSpABbOzQaNnrAh6oFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af3f52189585125356d5a035024d3bdc_JaffaCakes118

Files

af3f52189585125356d5a035024d3bdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c82a4fe7e5752ef85fa4f39d20e7053f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringW
GetVersion
DeviceIoControl
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
LCMapStringA
InitializeCriticalSection
WriteFile
RtlUnwind
GetModuleHandleA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
CreateFileA
CloseHandle
GetACP
GetCPInfo
HeapFree
DeleteCriticalSection
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA

user32

ShowWindow
DialogBoxParamA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
GetForegroundWindow
MessageBoxA
SetForegroundWindow
EndDialog
PostQuitMessage
SetTimer
BeginPaint
EndPaint
DefWindowProcA
DestroyWindow
SendMessageA
UpdateWindow
CreatePopupMenu
AppendMenuA
GetCursorPos
TrackPopupMenuEx
DestroyMenu
PostMessageA
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
FindWindowA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCloseKey

shell32

Shell_NotifyIconA

winmm

waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutWrite
waveOutPrepareHeader

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c82a4fe7e5752ef85fa4f39d20e7053f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

winmm

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 36KB

.rsrc Size: 104KB - Virtual size: 132KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 36KB

.rsrc
Size: 104KB - Virtual size: 132KB