d2fe4b7060d75192d67f55325318fe1b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2fe4b7060d75192d67f55325318fe1b_JaffaCakes118
Size

43KB
MD5

d2fe4b7060d75192d67f55325318fe1b
SHA1

d57498a09ef74a7907ae7f535f3f251f932b83b3
SHA256

4945dc0ecb76e9711f31eb9aade13ad1cff31d00b6db13405b865a8241912319
SHA512

6a36a2ff6945fa169d947cb43f5df2e2a0acd28e1c29a88f631d6d4bd04ac2f653e8c852b3f5445a37a7a14d99148c28a74b177ec55c21a001ec490b854e54a1
SSDEEP

768:tRNtN6sTc6kAcAl/MDu7NeMgH4qVZnCQJ4Zqta62HF03qifyypatEE7mR8+ZkQ6g:tRN3TQActnDn75tLuF+CLmR8+ZEopTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2fe4b7060d75192d67f55325318fe1b_JaffaCakes118

Files

d2fe4b7060d75192d67f55325318fe1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd679a35f1af306c88ee5ebdc6c3b382

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontA
SetBkMode
SelectObject
BitBlt
GetTextMetricsA
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
CreateCompatibleDC
SetTextColor

user32

AppendMenuA
AnimateWindow
ShowWindow
UpdateWindow
GetCursorPos
TrackPopupMenu
MoveWindow
GetScrollRange
SetScrollPos
BeginPaint
DialogBoxIndirectParamA
EndDialog
GetSystemMetrics
SetWindowPos
GetClientRect
GetDC
GetSysColor
SetRect
SendMessageA
SendDlgItemMessageA
EnableWindow
GetDlgItem
LoadIconA
EndPaint
FillRect
ReleaseDC
SetScrollInfo
ShowScrollBar
DrawTextA
MessageBeep
GetParent
SetPropA
MessageBoxA
RemovePropA
SetWindowLongA
CallWindowProcA
GetPropA
SetCursor
LoadCursorA
CreatePopupMenu
GetWindowLongA
CreateWindowExA
SetFocus

kernel32

UnmapViewOfFile
CloseHandle
SetFileAttributesA
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
GetFileSize
WriteFile
SetFilePointer
ReadFile
CreateFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
GetStartupInfoA
LocalAlloc
InterlockedExchange
FlushFileBuffers
SetLastError
CopyFileA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
CreateProcessA
WaitForSingleObject
FreeLibrary
GetVersionExA
GetProcAddress
LoadLibraryA
Sleep
FindResourceA
LoadResource
MultiByteToWideChar
GetModuleHandleA
GetLastError
FormatMessageA
RaiseException

comdlg32

GetOpenFileNameA

imagehlp

ImageNtHeader

shell32

ShellExecuteA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_onexit
__dllonexit
_cexit
??2@YAPAXI@Z
strrchr
__CxxFrameHandler
memcpy
free
malloc
memcmp
sprintf
_CxxThrowException
memset
??3@YAXPAX@Z
_except_handler3
strcpy
strlen
_XcptFilter
_exit
??1type_info@@UAE@XZ
_c_exit
strcat

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd679a35f1af306c88ee5ebdc6c3b382

Headers

File Characteristics

Imports

gdi32

user32

kernel32

comdlg32

imagehlp

shell32

advapi32

msvcrt

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 64KB

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 64KB

.rsrc
Size: 21KB - Virtual size: 20KB