b813769abe034614669fbe8dff7bed7b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b813769abe034614669fbe8dff7bed7b_JaffaCakes118
Size

171KB
MD5

b813769abe034614669fbe8dff7bed7b
SHA1

f6017904b87c5d087e796dde8cc294f1d7f46b3e
SHA256

2f5790f62d2bd27f22febdba9bb07a86fc85cab7487d315471cabafce58c4e35
SHA512

2f0812d4eff49df15e9e3e6e0771b5d45b7dc545dbc30d3db7e85255bda0e3ed4ec5ae5dc6a9c50bf076812ea975d5f972aad12d9573c41b5139669da89c77ab
SSDEEP

3072:V9Xin0wovWOFNusXCgcNMEu4v19JkmviTiJ7zkvhuXhZx3ARxE5Q0cRtZh+R:V9C0wEWyN3XEuC9iiJUvhuP1ARxcsRtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b813769abe034614669fbe8dff7bed7b_JaffaCakes118

Files

b813769abe034614669fbe8dff7bed7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c10e8c64d3cf31aae9cf03571ca674ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA

winmm

timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod

quartz

AMGetErrorTextW

shell32

SHGetSpecialFolderPathA

user32

CopyRect
wsprintfA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
CreateWindowExA
PostThreadMessageA
wvsprintfA
RegisterWindowMessageA
LoadStringA
MonitorFromWindow
GetMessageA
GetQueueStatus
RegisterClassA
DestroyWindow

kernel32

CreateMutexA
SetEvent
VirtualFree
CreateFileW
GetSystemInfo
LeaveCriticalSection
GetTapeParameters
GetModuleFileNameA
FindResourceA
GetSystemTime
GetSystemTimeAsFileTime
GetProcessHeap
CreateSemaphoreA
WaitForMultipleObjects
lstrlenA
ReleaseMutex
GetThreadPriority
InterlockedDecrement
InitializeCriticalSection
IsBadReadPtr
LoadLibraryW
ClearCommError
GlobalAlloc
GetLastError
DisableThreadLibraryCalls
FreeLibrary
GetCurrentThread
GetACP
QueryPerformanceCounter
EnumResourceNamesA
LockResource
GetVersionExA
ResetEvent
GetTickCount
TerminateThread
CreateEventA
LoadResource
WaitForSingleObject
FatalExit
CloseHandle
Sleep
GetProcAddress
GetExitCodeThread
LocalFree
GetModuleFileNameW
SetThreadPriority
IsBadWritePtr
HeapFree
InterlockedIncrement
MultiByteToWideChar
GetCurrentProcessId
VirtualAlloc
ReleaseSemaphore
WideCharToMultiByte
EnterCriticalSection
ResumeThread
GetCurrentThreadId
LoadLibraryA
CreateThread
DeleteCriticalSection
ExitProcess

ole32

StringFromCLSID
CoUninitialize
CreateStreamOnHGlobal
CoFreeUnusedLibraries
GetRunningObjectTable
CreateItemMoniker
CoCreateInstance
CoTaskMemFree
CoRevokeClassObject
CoInitialize
CoRegisterClassObject
CLSIDFromString
CoInitializeEx
StringFromGUID2
CoTaskMemAlloc

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c10e8c64d3cf31aae9cf03571ca674ba

Headers

File Characteristics

Imports

advapi32

winmm

quartz

shell32

user32

kernel32

ole32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 42KB - Virtual size: 41KB

.lib Size: 512B - Virtual size: 88KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 42KB - Virtual size: 41KB

.lib
Size: 512B - Virtual size: 88KB