b201dcf40e21164d3013320fb13d8b35_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b201dcf40e21164d3013320fb13d8b35_JaffaCakes118
Size

257KB
MD5

b201dcf40e21164d3013320fb13d8b35
SHA1

54432ecdb16d51f4a6ca5e64869080035c8a76bd
SHA256

cad13bb7c4083f2b4cee4b52bc53155435907ff870d63bb4eb42c1d199e379ab
SHA512

434ed0dcb610424ee1399e4cd5a3d978c4753aebce4b10a5ef51d5fe852663666f192a5011f962d95bef3ebf8113ff1d21e5af162deff4eafefeddb735de73a6
SSDEEP

3072:vS5jxPLn8bywhaYiwEScQWsEetmvevzzDvOO782xOPVuatnlWb8LirHQAj1U41Gp:mt4i62sE2ZzW9fPV7TWaDAj13IzhUS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b201dcf40e21164d3013320fb13d8b35_JaffaCakes118

Files

b201dcf40e21164d3013320fb13d8b35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ae54a572129433fede3999134b6a0d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetTempFileNameW
InitializeCriticalSection
WaitForSingleObject
GetCurrentProcess
CreateEventW
GetCurrentThreadId
GetCurrentProcessId
WaitForMultipleObjects
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoA
CreateDirectoryW
Sleep
GetFileAttributesW
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
LoadLibraryW
FreeLibrary
GetTickCount
MultiByteToWideChar
GetVersionExW
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetVersionExA
GetProcessHeap
SetUnhandledExceptionFilter
HeapCreate
ExitProcess
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
RaiseException
GetStartupInfoA
GetEnvironmentStringsW
QueryPerformanceCounter
GetProcAddress

user32

MessageBoxW
PeekMessageW
SendDlgItemMessageA
LoadMenuA
AppendMenuW
MessageBoxIndirectA
ShowCursor
InsertMenuItemW
WinHelpA
GetSystemMetrics
MonitorFromPoint
EnableMenuItem
CreateDialogIndirectParamW
GetFocus
SetWindowRgn
LoadIconA
GetMenu
GetDesktopWindow
GetActiveWindow
SetMenu
GetClassInfoExW
MessageBoxA
DestroyMenu
EnumClipboardFormats
GetScrollPos

advapi32

FreeSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegDeleteKeyA
EqualSid

shell32

ord680
ShellExecuteExW
SHGetDesktopFolder

security

SealMessage
CompleteAuthToken

gdi32

CreateFontIndirectExA
CreateScalableFontResourceW
SelectBrushLocal
AddFontResourceA
GetRasterizerCaps
GetEnhMetaFileA
CreateSolidBrush
CreateBitmapIndirect
CreatePen
AddFontResourceW
GetStockObject
CreateFontIndirectExW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UNeyY
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.P
Size: 1024B - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.C
Size: 103KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EI
Size: 3KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Qxlzm
Size: 120KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ae54a572129433fede3999134b6a0d1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

security

gdi32

Sections

.text Size: 12KB - Virtual size: 12KB

.UNeyY Size: 1024B - Virtual size: 48KB

.rdata Size: 3KB - Virtual size: 31KB

.P Size: 1024B - Virtual size: 137KB

.C Size: 103KB - Virtual size: 121KB

.EI Size: 3KB - Virtual size: 304KB

.data Size: 6KB - Virtual size: 131KB

.Qxlzm Size: 120KB - Virtual size: 142KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 12KB - Virtual size: 12KB

.UNeyY
Size: 1024B - Virtual size: 48KB

.rdata
Size: 3KB - Virtual size: 31KB

.P
Size: 1024B - Virtual size: 137KB

.C
Size: 103KB - Virtual size: 121KB

.EI
Size: 3KB - Virtual size: 304KB

.data
Size: 6KB - Virtual size: 131KB

.Qxlzm
Size: 120KB - Virtual size: 142KB

.rsrc
Size: 7KB - Virtual size: 7KB