d349fe80b31582341226e59c0d5fffb6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d349fe80b31582341226e59c0d5fffb6_JaffaCakes118
Size

168KB
MD5

d349fe80b31582341226e59c0d5fffb6
SHA1

81ed72f78fb7119627238c7c0340dcafb6ad2446
SHA256

259e47ff2e18d57b7ac9fbfb2df07dfac4512a048c7f7551cb96fa0dd52516b1
SHA512

a5dc18217bb2e148c9e2824d68acf94b6327decfc283a603b988efe426ebec41b7f93579e7aecf18079a37150f88649d2bf06728f0635c799d875424fd7c0618
SSDEEP

3072:V/N+BnntiAHNFVxcBTR+ufuOU4/zNVuFxo9ly65YfnZ3cIRNk5Dopxt0E:VF+GOcBFZfJPPuFxo5wBRNeo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d349fe80b31582341226e59c0d5fffb6_JaffaCakes118

Files

d349fe80b31582341226e59c0d5fffb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

806b71a0801ed3bd58854c5086b41438

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalAlloc
SetFilePointer
SystemTimeToFileTime
GetFileAttributesA
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
SetStdHandle
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GlobalUnlock
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GlobalFree
GetPrivateProfileStringA
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
FindFirstFileA
lstrcpynA
FindNextFileA
FindClose
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetLocalTime
CreateThread
CreateFileA
WriteFile
ReadFile
CloseHandle
GetModuleHandleA
CreateMutexA
GetLastError
GetTickCount
GetModuleFileNameA
lstrlenA
SetCurrentDirectoryA
ExitProcess
WideCharToMultiByte
Sleep

user32

TranslateMessage
GetMessageA
SetTimer
DispatchMessageA
DestroyMenu
TrackPopupMenu
InsertMenuItemA
wsprintfA
SetWindowPos
DrawTextA
CreatePopupMenu
CreateMenu
GetDC
ReleaseDC
GetCaretPos
HideCaret
OpenClipboard
GetClipboardData
CloseClipboard
DestroyCaret
SetCaretPos
ShowCaret
GetClientRect
SetRect
FillRect
MessageBoxA
GetCursorPos
PostQuitMessage
ShowWindow
SetForegroundWindow
DefWindowProcA
MoveWindow
SetCapture
ReleaseCapture
LoadCursorA
RegisterClassExA
CreateWindowExA
GetDesktopWindow
GetWindowRect
LoadIconA

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

winmm

PlaySoundA

gdi32

CreateFontA
SetTextColor
CreateSolidBrush
DeleteObject
CreateCompatibleDC
GetTextExtentPoint32A
BitBlt
DeleteDC
SetBkMode
SetBkColor
CreateDIBitmap
SelectObject
CreateCompatibleBitmap

advapi32

RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

806b71a0801ed3bd58854c5086b41438

Headers

File Characteristics

Imports

kernel32

user32

wininet

winmm

gdi32

advapi32

shell32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 42KB

.rsrc Size: 40KB - Virtual size: 38KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 42KB

.rsrc
Size: 40KB - Virtual size: 38KB