b29a0f06e52a1145bb849038fe76d160_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b29a0f06e52a1145bb849038fe76d160_JaffaCakes118
Size

724KB
MD5

b29a0f06e52a1145bb849038fe76d160
SHA1

3799f58d5d7acaf37c23830f189c8b0f8b6fff16
SHA256

82bd47a9ba013cc1b37372a32ee221a5914fbf5b3aab676e185995c65cba1a58
SHA512

d19dd944f567e3b802174636c776c605a7da7e6ad2561e499d656edb9bd6a2cef04f5a2324bb842e71d8f5ceabff7583a033907a4666fdc63af105721c19a6c4
SSDEEP

12288:u3+nl9uzLC5ujsdP6PN3ymaiWcYVmVgGMLdaSNLbWenjmuR0yZLP2+8AYBv5+Uc4:PnldKk6hmcYVmuGM36TuR0QP8AYYUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b29a0f06e52a1145bb849038fe76d160_JaffaCakes118

Files

b29a0f06e52a1145bb849038fe76d160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d2fcba58982c3df2259ce32fa77d875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FindExecutableA
SHInvokePrinterCommandW
SHGetFileInfo
SHAppBarMessage

user32

DdeNameService
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
GetKeyboardLayoutNameW
RegisterClassExA
DialogBoxIndirectParamA
DlgDirListComboBoxW
EnumWindows
SwapMouseButton
GetKeyNameTextW
ArrangeIconicWindows
CharUpperBuffA
MapWindowPoints
DdeCmpStringHandles
RegisterClassA

comctl32

InitCommonControlsEx

advapi32

RegSetValueExW
CryptDecrypt
RevertToSelf
RegLoadKeyA
CryptReleaseContext
LookupAccountNameA
CryptAcquireContextW
RegDeleteValueA
CryptSetProviderW
RegQueryInfoKeyW
RegCreateKeyA
RegLoadKeyW
CryptGenKey
RegQueryValueExW
CryptEncrypt
LookupPrivilegeValueA
CryptDestroyHash
CryptSetKeyParam
RegSetValueExA
RegEnumValueA
RegSetValueW
CryptVerifySignatureW
AbortSystemShutdownW
RegEnumKeyExW

kernel32

GetStdHandle
GetTempFileNameA
ExitProcess
TerminateProcess
LoadLibraryW
GetEnvironmentStrings
GetModuleHandleW
HeapValidate
WriteConsoleW
FreeLibrary
GetProcessAffinityMask
OutputDebugStringW
IsBadReadPtr
VirtualFree
QueryPerformanceCounter
GetACP
OpenFileMappingA
EnumSystemLocalesA
DebugBreak
LCMapStringW
GetUserDefaultLCID
RtlUnwind
InterlockedIncrement
GetCurrentThread
DeleteCriticalSection
GetModuleHandleA
TlsAlloc
WideCharToMultiByte
SetConsoleCtrlHandler
GetCommandLineA
GetStringTypeW
GetLocaleInfoW
TlsSetValue
CompareStringW
HeapReAlloc
GetEnvironmentStringsW
Sleep
HeapCreate
GetModuleFileNameW
InterlockedExchange
UnhandledExceptionFilter
GetProcessHeap
IsValidLocale
SetEnvironmentVariableA
VirtualAlloc
TlsGetValue
FreeEnvironmentStringsA
SetComputerNameW
GetDateFormatA
ReadFile
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStartupInfoA
ResetEvent
GetSystemTimeAsFileTime
LoadLibraryA
SetLastError
CompareStringA
GetStringTypeA
CreateMutexA
GetLastError
LocalFree
SetFilePointer
FlushFileBuffers
HeapAlloc
OpenFile
VirtualQuery
OutputDebugStringA
GetConsoleCP
IsDebuggerPresent
RaiseException
WriteFile
CreateFileA
GetConsoleMode
GetLocaleInfoA
GetTimeFormatA
GetTickCount
LCMapStringA
GetProcAddress
GetConsoleOutputCP
HeapFree
lstrlenA
TlsFree
OpenMutexA
GetFileType
GetCPInfo
GetCurrentProcessId
GetSystemDirectoryW
FreeEnvironmentStringsW
EnterCriticalSection
IsValidCodePage
InterlockedDecrement
GetOEMCP
GetCurrentProcess
GetTimeZoneInformation
WriteConsoleA
CompareFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
MultiByteToWideChar
HeapDestroy
HeapSize
CloseHandle
SetHandleCount
LeaveCriticalSection
WritePrivateProfileStructA
GetCurrentThreadId

comdlg32

PageSetupDlgW
PrintDlgA
ChooseFontA

wininet

FindFirstUrlCacheEntryExA
DeleteUrlCacheGroup
InternetWriteFileExA

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d2fcba58982c3df2259ce32fa77d875

Headers

File Characteristics

Imports

shell32

user32

comctl32

advapi32

kernel32

comdlg32

wininet

Sections

.text Size: 344KB - Virtual size: 344KB

.rdata Size: 49KB - Virtual size: 67KB

.data Size: 317KB - Virtual size: 316KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 344KB - Virtual size: 344KB

.rdata
Size: 49KB - Virtual size: 67KB

.data
Size: 317KB - Virtual size: 316KB

.rsrc
Size: 12KB - Virtual size: 12KB