de7f245fe5d64593d9382c5bb92bcc6b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

de7f245fe5d64593d9382c5bb92bcc6b_JaffaCakes118
Size

300KB
MD5

de7f245fe5d64593d9382c5bb92bcc6b
SHA1

98506e0f9deaaabd0f4f25e31ee90173078cef45
SHA256

585f733521738223c07d0cc669940fe8217a459977a1291791c29379318392fb
SHA512

6214554e444d18d733eda3357daca4d58399169bd6e82631be283a86364d86bd318908861d55169199abab073bed6baa9c84c716333595e372d96f52f34413e6
SSDEEP

6144:xbRh+EvbvU5zPHxsy4PDWqXJKDtKuOk0obriGV6qobL1:xbRAXROPDHJEtxOrobWn/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7f245fe5d64593d9382c5bb92bcc6b_JaffaCakes118

Files

de7f245fe5d64593d9382c5bb92bcc6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f2a5888043f5c3498eb0a4e0e42546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceA
LocalLock
GlobalFree
GlobalGetAtomNameW
CreateDirectoryW
GetUserDefaultLCID
SetVolumeLabelA
OutputDebugStringA
GetDriveTypeA
VirtualLock
GetTempPathW
SystemTimeToFileTime
GetModuleFileNameW
EnumTimeFormatsW
VirtualProtect
FileTimeToLocalFileTime
WriteFile
CompareStringW
WritePrivateProfileStringA
LocalAlloc
LoadLibraryExW
SetSystemTime
GetLargestConsoleWindowSize
GetPrivateProfileStringW
AreFileApisANSI
RaiseException
FindFirstFileA
ExpandEnvironmentStringsW
SearchPathW
CreatePipe
GetConsoleMode
SetProcessAffinityMask
FlushFileBuffers
GlobalFindAtomA
SuspendThread
FillConsoleOutputCharacterA
ReadDirectoryChangesW
GetProcessHeap
GetFileType
CreateProcessA
EnumResourceLanguagesW
GlobalUnlock
RemoveDirectoryA
GetOEMCP
GlobalReAlloc
GetStringTypeExW
GlobalAddAtomW
DeleteCriticalSection
Beep
SetConsoleTitleA
FreeResource
PrepareTape
SetEvent
SetupComm
ExitProcess
lstrcmpiA
LocalSize
ReadFileScatter
GetTempFileNameA
GetEnvironmentVariableW
GetWindowsDirectoryA
WritePrivateProfileStructA
SetFileAttributesA
ReadConsoleOutputA
GetCommandLineW
GetBinaryTypeA
CancelIo
GetCommModemStatus
SetErrorMode
SetFileTime
GetThreadPriority
GetFileAttributesA
GetVersionExA
GetCommandLineA
GetThreadContext
VirtualAlloc

user32

SetParent
WindowFromPoint
GetClassLongA
LoadImageA
DestroyCursor
GetMessageA
GetDlgCtrlID
IsWindowUnicode
SetCursorPos
OpenInputDesktop
DestroyIcon
CharNextExA
CloseWindow
UnloadKeyboardLayout
SetCaretPos
GetProcessDefaultLayout
IsDialogMessageW
AppendMenuA
RegisterClassW
ModifyMenuW
CharLowerBuffW
SubtractRect
MapDialogRect
MsgWaitForMultipleObjects
GetMenuItemCount
GetInputState
SendDlgItemMessageW
GetKeyboardLayout
EqualRect
GetMenuStringW
ShowCursor
SetWindowRgn
ChildWindowFromPointEx
EnableMenuItem
RegisterClipboardFormatW
OpenClipboard
GetUserObjectInformationA
GetNextDlgGroupItem
RemoveMenu
SetUserObjectSecurity
MessageBoxExA

gdi32

GetWindowExtEx
GetTextCharacterExtra
GetOutlineTextMetricsW
AbortDoc
ArcTo
RoundRect
GetTextCharset
GetDIBits
CreateICA
CopyMetaFileW
GetPixelFormat
EndPage
EnumFontFamiliesW
SetSystemPaletteUse
PathToRegion

comdlg32

GetOpenFileNameA

advapi32

CryptAcquireContextW
RegSetKeySecurity
AddAce
RegQueryInfoKeyA
RegCreateKeyExW
GetSecurityDescriptorGroup
RegCreateKeyW
GetServiceDisplayNameW
SetFileSecurityA

shell32

SHGetSpecialFolderLocation
DragFinish

ole32

CoResumeClassObjects
StgCreateStorageEx
CoImpersonateClient
GetRunningObjectTable
OleLockRunning
OleIsRunning
OleInitialize
OleCreateLink
CreateBindCtx
CoTaskMemRealloc

oleaut32

SysAllocStringLen
SysFreeString
VariantCopy
SafeArrayGetLBound

comctl32

ImageList_LoadImageW
ImageList_DragShowNolock
ImageList_Add
ImageList_DrawIndirect

shlwapi

AssocCreate
PathIsUNCW
SHOpenRegStream2W
PathGetCharTypeA
StrDupW
PathQuoteSpacesA
PathIsUNCServerW
SHCopyKeyA
PathIsDirectoryEmptyW
PathGetDriveNumberW
PathRemoveFileSpecA
PathRemoveBlanksA
StrDupA
StrCmpNIW
StrCpyNW
PathRemoveExtensionW
PathFileExistsW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

01f2a5888043f5c3498eb0a4e0e42546

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 276KB - Virtual size: 272KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 276KB - Virtual size: 272KB