c28f0fecbb1ddd08d98eaab7fb3ee50f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c28f0fecbb1ddd08d98eaab7fb3ee50f_JaffaCakes118
Size

115KB
MD5

c28f0fecbb1ddd08d98eaab7fb3ee50f
SHA1

ac9f792d10f48adeb0efbb0ebf1591f547fdd214
SHA256

e6affee9114cfa50e806fe024c1ad3b4919a0516272a01a98084b5992620e849
SHA512

89ecb83d113e726000c98749a8e40d0a8684a40500d30aa85a03de744e1b3e842ae8f59a1936070a01a6624fc2aa05cb2aa45d4ece63ef92a05ff3f415d014f6
SSDEEP

3072:kj58FIxncnKsC6PiiWSl+ma2m1u2RYzoP:onc16pvn2mZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28f0fecbb1ddd08d98eaab7fb3ee50f_JaffaCakes118

Files

c28f0fecbb1ddd08d98eaab7fb3ee50f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6c4f6edd8745f5cc2ce37ffbed151d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
GetProcAddress
WinExec
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetLocalTime
GlobalFree
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
ReadFile
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetFilePointer
GetCurrentProcess
TerminateProcess
WriteFile
CloseHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
CreateDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GlobalAlloc
GetWindowsDirectoryA
GetLastError
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
HeapAlloc
HeapFree
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile

user32

GetSystemMetrics
MoveWindow
GetMenu
PostMessageA
ReleaseDC
GetDC
GetWindowRect
ChangeDisplaySettingsA
SendMessageA
CreateWindowExA
EndPaint
BeginPaint
SetCursor
LoadCursorA
FillRect
wsprintfA
MessageBoxA
GetCursorPos
EnumDisplaySettingsA
DestroyWindow
IsDlgButtonChecked
GetWindowTextA
GetDlgItemTextA
GetDlgCtrlID
GetClientRect
GetFocus
SetScrollRange
ScrollWindow
SetScrollPos
PostQuitMessage
DefWindowProcA
InvalidateRect
FindWindowA
GetSystemMenu
AppendMenuA
PeekMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetMessageA
SetTimer
SetWindowLongA
ShowScrollBar
UpdateWindow
GetActiveWindow
LoadIconA
RegisterClassA
ShowWindow
SetActiveWindow
SetWindowPos
GetAsyncKeyState
ShowCursor
SetFocus
SetWindowTextA
SetCursorPos

gdi32

SetBkMode
TextOutA
SetStretchBltMode
StretchBlt
DeleteObject
CreateFontIndirectA
GetStockObject
SelectObject
GetTextMetricsA
CreatePen
CreateSolidBrush
SetTextColor
GetTextExtentPoint32A
GetTextExtentPointA
CreatePalette
SetDIBColorTable
GetDeviceCaps
MoveToEx
LineTo
SetPixel
GetPixel
SelectPalette
StretchDIBits
Rectangle
RealizePalette
BitBlt
DeleteDC
CreateDIBSection
CreateCompatibleDC

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

shell32

ShellExecuteExA
ShellExecuteA

winmm

sndPlaySoundA
mciSendStringA

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6c4f6edd8745f5cc2ce37ffbed151d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

winmm

Sections

.text Size: 89KB - Virtual size: 89KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 14KB - Virtual size: 36KB

.rsrc Size: 1024B - Virtual size: 940B

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 14KB - Virtual size: 36KB

.rsrc
Size: 1024B - Virtual size: 940B