efa58bdacdf8b28d2a796b23b235cc56_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

efa58bdacdf8b28d2a796b23b235cc56_JaffaCakes118
Size

86KB
MD5

efa58bdacdf8b28d2a796b23b235cc56
SHA1

1bbe873e1af333f596853d0b31ad517ef0548561
SHA256

bd249a18640cad6ba27bf2f1083ad44e65be3ff3b8a86b9c03ba7de59d170655
SHA512

bf0f9ccf9fadac6297bffeebac69c94c1d57fed5da08ae919521f630a965d890fa99ef592524f09cff0946be2922de7006a46ab356b60edf262b712cad38323c
SSDEEP

1536:Co3x5yzQnwcsiFHKE2amA5dvzEL+zhR04LqOi2T:CoB5ycbsiFHZ2amAztzhR04Lqj2T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa58bdacdf8b28d2a796b23b235cc56_JaffaCakes118

Files

efa58bdacdf8b28d2a796b23b235cc56_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b087b468ec63085cad8f223e8cb00ad1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
StrFormatByteSizeA

comctl32

InitCommonControlsEx

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

kernel32

CreateFileA
WriteFile
CloseHandle
GetVersionExA
lstrlenA
lstrcmpA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
DeleteFileA
SetFilePointer
FlushFileBuffers
ReadFile
lstrcpynA
lstrcmpiA
MultiByteToWideChar
CreateThread
FindFirstFileA
Sleep
FindNextFileA
FindClose
RemoveDirectoryA
OutputDebugStringA
CreateDirectoryA
CopyFileA
GetSystemTime
FormatMessageA
LocalFree
GetModuleHandleA
GetThreadLocale
SetThreadLocale
GetFileType
SystemTimeToFileTime
GetCurrentDirectoryA
DosDateTimeToFileTime
SetFileTime
HeapReAlloc
RtlUnwind
LoadLibraryW
lstrcpyA
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
ExitProcess
HeapCreate
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
TlsFree
GetCommandLineA
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
GetTempPathA
CreateMutexA
GetLastError
GetCurrentProcess
lstrcatA
GetWindowsDirectoryA
GetTickCount
SetStdHandle
WriteConsoleW
CreateFileW
CompareStringW
SetLastError
HeapSetInformation
GetStartupInfoW
SetEnvironmentVariableA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
RaiseException
DecodePointer
EncodePointer

user32

GetUserObjectInformationA
wsprintfA
SetDlgItemTextA
PostMessageA
GetDlgItem
CharUpperA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
CreateDialogParamA
RegisterClassExA
LoadIconA
LoadStringA
MessageBoxA
GetSystemMetrics
MoveWindow
GetClientRect
SetForegroundWindow
DefWindowProcA
PostQuitMessage
ShowWindow
LoadImageA
DestroyWindow
DestroyIcon
WaitForInputIdle
SetWindowTextA
CreateWindowExA
GetThreadDesktop
GetParent
LoadCursorA
SendMessageA

gdi32

CreateSolidBrush

advapi32

RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA
Shell_NotifyIconA

ole32

CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b087b468ec63085cad8f223e8cb00ad1

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

urlmon

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 4KB - Virtual size: 30KB

.rsrc Size: 73KB - Virtual size: 73KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 4KB - Virtual size: 30KB

.rsrc
Size: 73KB - Virtual size: 73KB