af89ec3f6871d5a12acbf5c14864b643_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af89ec3f6871d5a12acbf5c14864b643_JaffaCakes118
Size

187KB
MD5

af89ec3f6871d5a12acbf5c14864b643
SHA1

9713c23d54180eb8d6a1e439885a6ace52ff4e22
SHA256

9bd2db0141ac2ceaaae0f1f367429af6165c489bd3218707c889f80063f1c782
SHA512

9b6bbb0f53c20f2d8af5f5b04f29a8007b46d59fbb4077a3ceb645fc419efd95519703a14fd5bb998fce5945d88c96df09fd757c8ef6cf5757ae65ab5be36b9d
SSDEEP

3072:cpjiz1RQ2CN/gbvdBmHitGSXeR4HwHN26OV7VjKci9JQFLlxZ5riGETCNraUA0gO:cpSENiVBmHXSXe6HUE627VjKciJKBx1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af89ec3f6871d5a12acbf5c14864b643_JaffaCakes118

Files

af89ec3f6871d5a12acbf5c14864b643_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4504cb186c4a1aeaf275e5c1b0105105

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

shlwapi

PathAddBackslashA

kernel32

IsBadCodePtr
ResetEvent
CompareStringA
SetHandleCount
FreeEnvironmentStringsA
InterlockedDecrement
GetCurrentProcess
InitializeCriticalSection
GetThreadIOPendingFlag
GetOEMCP
WritePrivateProfileStringA
CreateSemaphoreA
HeapAlloc
GetACP
FlushFileBuffers
IsBadReadPtr
RtlUnwind
SetUnhandledExceptionFilter
GlobalAlloc
GetStringTypeW
UnmapViewOfFile
GetTimeZoneInformation
GetThreadPriority
WriteFile
GetFullPathNameW
GetStartupInfoA
GetSystemTime
GetFullPathNameA
TlsFree
WideCharToMultiByte
GetLastError
TerminateProcess
Sleep
InterlockedIncrement
LCMapStringW
TransmitCommChar
GetStdHandle
GetPriorityClass
GetTickCount
LeaveCriticalSection
MultiByteToWideChar
SetEndOfFile
IsDBCSLeadByte
GetTempPathW
HeapSize
InterlockedExchange
GetPrivateProfileStringA
IsBadWritePtr
CreateFileMappingA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
CreateThread
SetLastError
CreateFileW
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ExitThread
SetPriorityClass
GetStringTypeA
GetEnvironmentVariableA
lstrcpyA
HeapReAlloc
OutputDebugStringA
ExitProcess
RaiseException
lstrcmpA
LoadLibraryA
GetModuleHandleA
EnterCriticalSection
HeapFree
GetProcAddress
GetCPInfo
FileTimeToLocalFileTime
GlobalFree
ExitProcess
DeleteCriticalSection
GlobalUnlock
TlsAlloc
GetCurrentThreadId
GetFileType
ReleaseSemaphore
CompareStringW
HeapCreate
FreeLibrary
lstrcmpW
LCMapStringA
GetDiskFreeSpaceExA
HeapDestroy
FileTimeToSystemTime
GetCommandLineA
GetEnvironmentStrings
UnhandledExceptionFilter
GetModuleFileNameA
LoadLibraryW
SetEvent
MapViewOfFile
CreateMutexA
SetStdHandle
GetTempPathA
GetTempFileNameA
TlsSetValue
WaitForSingleObject
SetEnvironmentVariableA

user32

wsprintfW
wsprintfA
GetKeyState
CharNextA
MessageBoxA
CharUpperA
CharLowerA

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4504cb186c4a1aeaf275e5c1b0105105

Headers

File Characteristics

Imports

msimg32

advapi32

shlwapi

kernel32

user32

Sections

.text Size: 158KB - Virtual size: 157KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 24KB - Virtual size: 24KB

.crt Size: 512B - Virtual size: 84KB

.text
Size: 158KB - Virtual size: 157KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 24KB - Virtual size: 24KB

.crt
Size: 512B - Virtual size: 84KB