ee96e3fffc1c034cdcf9d28e1fcfa633_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ee96e3fffc1c034cdcf9d28e1fcfa633_JaffaCakes118
Size

165KB
MD5

ee96e3fffc1c034cdcf9d28e1fcfa633
SHA1

61c6aada8161417f0e2ea6f3a97bf3811c57aba1
SHA256

1bad291bfe7176b9ef0b303c1fab986ad7b39e9f80f0d6679ecfd879366a715e
SHA512

2889db3653547ed95759e3caab2b2af302806a57f09bdb23e277783b792102a632444cdd12a08b7fe929e8851894552b5eb25572832f2b5f1cce88c72a6c9fb1
SSDEEP

3072:UmIosdOXnhB5+Q5wgAlVtrS8Z8cz2XUfe3tV0RS2N0Sg7ovQ/hD+CSwvTbkRiG:U9e3hmQ58Mne2XUfvbCxoIJQcTww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee96e3fffc1c034cdcf9d28e1fcfa633_JaffaCakes118

Files

ee96e3fffc1c034cdcf9d28e1fcfa633_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57a5042e0fe90eecf48b56318379d36b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc

kernel32

SetUnhandledExceptionFilter
GetCommandLineA
VirtualQuery
FreeLibrary
SizeofResource
VirtualAlloc
lstrlenA
GetOEMCP
CloseHandle
SetHandleInformation
GetCurrentProcess
TlsGetValue
RaiseException
HeapCreate
GetThreadLocale
VirtualFree
GetLocaleInfoA
GetStdHandle
IsBadWritePtr
LoadLibraryA
QueryPerformanceCounter
GetStringTypeA
LCMapStringA
LoadLibraryExA
TlsFree
TransmitCommChar
UnhandledExceptionFilter
HeapSize
SetHandleCount
SetLastError
IsDBCSLeadByte
HeapReAlloc
GetSystemTimeAsFileTime
FlushFileBuffers
InitializeCriticalSection
lstrcpynA
GetTickCount
WideCharToMultiByte
InterlockedExchange
GetModuleHandleA
IsBadReadPtr
LeaveCriticalSection
GetEnvironmentStringsW
FindResourceA
VirtualProtect
GetACP
EnumResourceNamesW
HeapDestroy
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
lstrcatA
GetSystemInfo
GetVersionExA
ExitProcess
WriteFile
SetStdHandle
lstrcpyA
GetProcessHeap
GetCurrentThreadId
DisableThreadLibraryCalls
LoadResource
EnterCriticalSection
GetEnvironmentStrings
GetProcAddress
TlsAlloc
TerminateProcess
ExitProcess
RtlUnwind
FreeEnvironmentStringsW
LockResource
GetLastError
HeapAlloc
GetModuleFileNameA
GetStartupInfoA
FlushInstructionCache
IsBadCodePtr
lstrlenW
TlsSetValue
LCMapStringW
GetFileType
GetCPInfo
MultiByteToWideChar
GetStringTypeW
DeleteCriticalSection
SetFilePointer
FreeEnvironmentStringsA
MulDiv
lstrcmpiA
HeapFree

shlwapi

PathFindExtensionA

msimg32

AlphaBlend
TransparentBlt

advapi32

RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA

gdi32

DeleteObject
GetTextExtentPointA
GetDeviceCaps
GetTextMetricsA
SelectObject
CreateFontIndirectA

user32

ShowWindow
IsWindow
GetDialogBaseUnits
SetWindowLongA
CheckDlgButton
GetDlgItemTextA
WinHelpA
DestroyWindow
MoveWindow
GetDC
IsDialogMessageA
ReleaseDC
UnregisterClassA
GetDlgItem
SendMessageA
SetDlgItemTextA
IsDlgButtonChecked
EnableWindow
CreateDialogParamA
CharNextA

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57a5042e0fe90eecf48b56318379d36b

Headers

File Characteristics

Imports

ole32

kernel32

shlwapi

msimg32

advapi32

gdi32

user32

Sections

.text Size: 133KB - Virtual size: 132KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 26KB - Virtual size: 26KB

.crt Size: 512B - Virtual size: 72KB

.text
Size: 133KB - Virtual size: 132KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 26KB - Virtual size: 26KB

.crt
Size: 512B - Virtual size: 72KB