d07143e1af735967552eb1c3e0fadbbf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d07143e1af735967552eb1c3e0fadbbf_JaffaCakes118
Size

165KB
MD5

d07143e1af735967552eb1c3e0fadbbf
SHA1

b0c662a93366ef781fba82d8dc52622c23ffbf31
SHA256

c8ba8e4862055dce378330773a958539132eec6c1910bffbbe99606765c9fcd7
SHA512

3db534046aa38232c415eb71a889ba6cbf045897baea57fd33dc3f3fcc8b92b6ed2ec50d07a9a1c9a07a7d1a7b479f0d97773df50e56f4dd50715f8a2a01cc92
SSDEEP

3072:WO8/B+F9lIveMNfS6K8JlbBUA0vaRANa/nYmHJoUp4d:pVFY2MF3bqAb2ynYeon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07143e1af735967552eb1c3e0fadbbf_JaffaCakes118

Files

d07143e1af735967552eb1c3e0fadbbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cd7b00b2aa9ddd503dc4e64ea0bc94e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

user32

CharUpperA
wsprintfW
GetKeyState
CharNextA
MessageBoxA
wsprintfA
CharLowerA

kernel32

CreateFileMappingA
LoadLibraryW
EnterCriticalSection
TlsGetValue
GetTickCount
InterlockedExchange
GetCurrentThreadId
GlobalUnlock
GetThreadIOPendingFlag
TlsFree
lstrcmpW
GetTimeZoneInformation
CreateFileW
IsDBCSLeadByte
GetEnvironmentStringsW
SetUnhandledExceptionFilter
ResetEvent
InterlockedIncrement
HeapReAlloc
MultiByteToWideChar
MapViewOfFile
WritePrivateProfileStringA
TransmitCommChar
GetPrivateProfileStringA
GetCurrentProcess
SetHandleCount
FreeLibrary
GetFileType
DeleteCriticalSection
GetCPInfo
HeapCreate
GetTempPathW
CreateSemaphoreA
GetThreadPriority
GetModuleHandleA
IsBadWritePtr
GetStartupInfoA
GetStdHandle
GetOEMCP
SetStdHandle
GetUserDefaultLCID
WideCharToMultiByte
GetProcAddress
LCMapStringA
GetFullPathNameW
HeapSize
SetPriorityClass
UnhandledExceptionFilter
GetLastError
ExitThread
CreateMutexA
IsBadReadPtr
WaitForSingleObject
SetEndOfFile
GetEnvironmentStrings
InitializeCriticalSection
CreateThread
GetPriorityClass
GetModuleFileNameA
lstrcmpA
EnumResourceNamesW
GetTempFileNameA
LeaveCriticalSection
IsBadCodePtr
GetEnvironmentVariableA
ExitProcess
GlobalAlloc
HeapDestroy
InterlockedDecrement
GetSystemTime
GetDiskFreeSpaceExA
RaiseException
RtlUnwind
GetStringTypeW
SetEvent
ReleaseSemaphore
HeapFree
TerminateProcess
TlsSetValue
SetLastError
OutputDebugStringA
FreeEnvironmentStringsA
FileTimeToSystemTime
GetACP
UnmapViewOfFile
lstrcpyA
CompareStringW
GetStringTypeA
FlushFileBuffers
Sleep
CompareStringA
GlobalFree
LCMapStringW
CloseHandle
FileTimeToLocalFileTime
GetTempPathA
WriteFile
GetFullPathNameA
FreeEnvironmentStringsW
LoadLibraryA
ExitProcess
TlsAlloc
GetCommandLineA
HeapAlloc
SetEnvironmentVariableA

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cd7b00b2aa9ddd503dc4e64ea0bc94e

Headers

File Characteristics

Imports

advapi32

shlwapi

msimg32

user32

kernel32

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 24KB - Virtual size: 23KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 24KB - Virtual size: 23KB

.crt
Size: 512B - Virtual size: 76KB