b563cf1153bc89311fcc1a93347b96c7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b563cf1153bc89311fcc1a93347b96c7_JaffaCakes118
Size

124KB
MD5

b563cf1153bc89311fcc1a93347b96c7
SHA1

52d51a82eff0eb0dfe8b4b8dc13aa10a89557c18
SHA256

71e4338b7e91d3e2dee489cbbba58f0e696be17d54eceeb1b4304bef9fde5f16
SHA512

241aedf8ec2ad88727b0ac034e34ec45e67f76e31ebf3fcc19b0cb92dbb78cb68f1f324922b7da5f0702f8700cf1c6b8edf46d7afa4a18951d25ed537e0fe25a
SSDEEP

3072:H73ao+Goy4HWQVCRiVhzYmJooFh0gvJSDADeak7dJHB/AdGh:Ohy4tSuOcnSsQLH5Adm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b563cf1153bc89311fcc1a93347b96c7_JaffaCakes118

Files

b563cf1153bc89311fcc1a93347b96c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32ffca73619f0935bb7e65996e0d0f81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetLastError
GetVersionExA
ReadFile
WriteFile
SetFilePointer
IsValidCodePage
CreateFileA
CloseHandle
LoadLibraryA
FreeLibrary
GlobalAlloc
OpenFile
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetProcAddress
GetPrivateProfileIntA
GetCurrentProcess
GetCurrentThread
GetLocaleInfoA
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetTickCount
GetModuleFileNameA
lstrcmpiA
GetTempPathA
SetErrorMode
GetWindowsDirectoryA
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
lstrcpyA
GetSystemInfo
lstrcatA
GetExitCodeProcess
VerLanguageNameA
CreateProcessA
GetDiskFreeSpaceA
_lclose
IsBadReadPtr
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetFileType
SetUnhandledExceptionFilter
IsBadCodePtr
FlushFileBuffers
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
LCMapStringA
LCMapStringW
SetStdHandle
GetStdHandle

user32

LoadIconA
SetTimer
PostQuitMessage
PostMessageA
KillTimer
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA
DialogBoxParamA
ShowWindow
GetDlgItem
EndDialog
CharNextA
CreateDialogParamA
DestroyWindow
IsWindow
IsDialogMessageA
PeekMessageA
SendDlgItemMessageA
ExitWindowsEx
MsgWaitForMultipleObjects
CharPrevA
LoadStringA
SetCursor
GetParent
GetSystemMetrics
GetClientRect
GetWindowTextLengthA
GetWindowTextA
GetDC
ReleaseDC
SendMessageA
MoveWindow
CreateWindowExA
DestroyIcon
DrawIcon
EndPaint
LoadCursorA
SetWindowTextA
RegisterClassA
BeginPaint
GetWindowPlacement
GetWindowRect

gdi32

GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPointA
GetObjectA
DeleteObject

advapi32

AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA
RegSetValueExA
OpenThreadToken
LookupPrivilegeValueA
OpenProcessToken
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32ffca73619f0935bb7e65996e0d0f81

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

version

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 60KB - Virtual size: 57KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 60KB - Virtual size: 57KB