fafddccee52e8f326ccbe97cbd119e45_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fafddccee52e8f326ccbe97cbd119e45_JaffaCakes118
Size

124KB
MD5

fafddccee52e8f326ccbe97cbd119e45
SHA1

179e82f014e2a57ecd656573de3525562347f665
SHA256

abb9362c6860d8347cf5419d352784327658852a2ce0754d300a1f6a768905f4
SHA512

ea0dd1fdf7cdd81b83edfcfff16589cf3a6558b07566dcf3e7e3e4b9c6323eaf587c729bfbb4905908da3c2cf919bff96168f063fae37f44e7e92e442ed088f9
SSDEEP

1536:XRsoaTL2hK2YdoszAWz5dTVOiG8t0tpdpSywn+uTFpSywn+uTvQ:XOIZlCAMHvt0tpdEhEk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fafddccee52e8f326ccbe97cbd119e45_JaffaCakes118

Files

fafddccee52e8f326ccbe97cbd119e45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrRStrIW

kernel32

GetPrivateProfileSectionW
lstrcatW
GetWindowsDirectoryW
MoveFileExW
GetModuleFileNameW
CloseHandle
CreateProcessW
CopyFileW
GetTempPathW
GetCurrentProcessId
DeleteFileW
SetFileAttributesW
GetFileAttributesW
WaitForSingleObject
OpenProcess
lstrcmpW
FreeLibrary
GetProcAddress
LoadLibraryExW
FindClose
GetLastError
FindNextFileW
FindFirstFileW
Process32NextW
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
HeapAlloc
Sleep
lstrlenW
RemoveDirectoryW
ReadFile
GetFileSize
CreateFileW
LoadLibraryW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateMutexW
lstrcpynW
GetCommandLineW
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetSystemTimeAsFileTime
lstrcpyW
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetVersionExW
GetProcessHeap
HeapFree
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW

user32

DialogBoxParamW
KillTimer
SetFocus
EndDialog
InvalidateRect
UpdateWindow
SetDlgItemTextW
GetDlgItem
EnableWindow
SystemParametersInfoW
GetWindowRect
MoveWindow
PostMessageW
SetTimer
FindWindowW
SendMessageW
wsprintfW
LoadStringW
MessageBoxW
ShowWindow

advapi32

RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey

shell32

SHChangeNotify
ShellExecuteExW

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 52KB - Virtual size: 124KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 52KB - Virtual size: 124KB