be408e7791a8e15f636d4acc8060e4fa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

be408e7791a8e15f636d4acc8060e4fa_JaffaCakes118
Size

618KB
MD5

be408e7791a8e15f636d4acc8060e4fa
SHA1

176b5c6febcc3f99a95d574cdb8c8f368c572d35
SHA256

2ffa670559997ed2269bed297cea00a67658616ed02e1f9b92fa8b31006a7f94
SHA512

eaa5bbbb6b3909cd09a7cc5dcebbcc36d011cfe13a271046f5864ed0bbd2539bf43305e60303771ec5e0eb7358f4f9806b47bbd150f354a7d6bfb3fa55c27110
SSDEEP

12288:eacBbb60AaSr3terEDTDzbq4pi+j7FgFjwn/UQRksXqcG:eac3A9LteoTfdpi+nFww/Gb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be408e7791a8e15f636d4acc8060e4fa_JaffaCakes118

Files

be408e7791a8e15f636d4acc8060e4fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fa2abe8bb5547ea9ef06c7ed890c5d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
Sleep
SetFileAttributesA
GetFileAttributesA
GetTempPathA
GetCommandLineA
SetFilePointer
ExitProcess
GetTempFileNameA
MultiByteToWideChar
CompareFileTime
CopyFileA
CreateFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
WaitForSingleObject
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GlobalFree
GetFileTime
GetDiskFreeSpaceA
DeleteFileA
GlobalAlloc
CloseHandle
SetFileTime
CreateThread
CreateProcessA
CreateDirectoryA
GetModuleFileNameA
GetModuleHandleA

user32

GetParent
GetDlgItemTextA
LoadBitmapA
SendDlgItemMessageA
IsWindowVisible
SetFocus
SetClassLongA
DestroyWindow
SetWindowTextA
CreateDialogParamA
GetDlgItem
GetWindowRect
GetAsyncKeyState
IsDlgButtonChecked
EnableWindow
IsWindowEnabled
GetDesktopWindow
ShowWindow
SetForegroundWindow
wsprintfA
MessageBoxA
InvalidateRect
UpdateWindow
PeekMessageA
DispatchMessageA
FindWindowA
SendMessageA
SetDlgItemTextA
LoadIconA
ScreenToClient
SetWindowPos
DialogBoxParamA
EndDialog

gdi32

SelectObject
GetTextMetricsA
GetStockObject
TextOutA
GetNearestColor
SetTextColor
SetBkColor
BitBlt
DeleteObject
CreateCompatibleDC

advapi32

RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHFileOperationA

ole32

OleInitialize
CoCreateInstance
CoInitialize
OleUninitialize

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fa2abe8bb5547ea9ef06c7ed890c5d1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 5KB - Virtual size: 4KB