f9ccd46f037ad8cfae51886719a99c88_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f9ccd46f037ad8cfae51886719a99c88_JaffaCakes118
Size

171KB
MD5

f9ccd46f037ad8cfae51886719a99c88
SHA1

a5a7a76411bd4f61db0a3e0bd7fe6dad8f741c15
SHA256

d37a644aa556235f9f3eb56fc18cdc6117dd381d504f1ea5d3090a90d332067d
SHA512

0fa6924dddbc51e3509974f87f860d3e35fb311beef97f36d2de57debf090971d06016e0d3e2f21bbe92eeab170176ec3fdbe3fbac39c87e48d16cdb8a7dab84
SSDEEP

3072:vgZaMid+wvyonOw+0hUDTljKjG3UTpTy6X8C96RkcH3SGcv6ZrH4dtpxz9iwLwzw:ocMidDyi+0hgT8G3mpTy6X8C961D94ft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ccd46f037ad8cfae51886719a99c88_JaffaCakes118

Files

f9ccd46f037ad8cfae51886719a99c88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1dc879f86b0a3cb5e4a37db68fe42c7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState
MessageBoxA
CharNextA
wsprintfW
wsprintfA
CharUpperA
CharLowerA

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

kernel32

GetCurrentProcess
RtlUnwind
HeapDestroy
GetOEMCP
GetSystemTime
WaitForSingleObject
HeapFree
LoadLibraryA
GetThreadIOPendingFlag
CreateSemaphoreA
CreateMutexA
CloseHandle
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringA
FileTimeToLocalFileTime
HeapReAlloc
GetCurrentThreadId
LCMapStringW
SetPriorityClass
FreeEnvironmentStringsA
SetHandleCount
CreateFileW
SetUnhandledExceptionFilter
IsBadReadPtr
GetStdHandle
GetCommandLineA
GetPriorityClass
IsBadCodePtr
TerminateProcess
LCMapStringA
GetEnvironmentStrings
TransmitCommChar
FlushFileBuffers
ExitProcess
FileTimeToSystemTime
RaiseException
UnmapViewOfFile
GetEnvironmentVariableA
GetFullPathNameW
WideCharToMultiByte
GetStringTypeA
HeapAlloc
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
InterlockedIncrement
GetTempFileNameA
SetEndOfFile
GlobalFree
GetFullPathNameA
SetStdHandle
LoadLibraryW
EnumResourceNamesW
WriteFile
GetProcAddress
CompareStringA
GetThreadPriority
CompareStringW
TlsAlloc
lstrcpyA
SetLastError
GetTempPathW
SetEvent
InterlockedExchange
MultiByteToWideChar
GlobalAlloc
ExitProcess
lstrcmpW
IsDBCSLeadByte
ExitThread
GetTimeZoneInformation
GlobalUnlock
GetACP
TlsGetValue
GetDiskFreeSpaceExA
FreeEnvironmentStringsW
IsBadWritePtr
GetStartupInfoA
InitializeCriticalSection
GetUserDefaultLCID
MapViewOfFile
HeapSize
GetPrivateProfileStringA
DeleteCriticalSection
GetModuleFileNameA
CreateThread
GetEnvironmentStringsW
InterlockedDecrement
ReleaseSemaphore
CreateFileMappingA
Sleep
TlsFree
lstrcmpA
ResetEvent
OutputDebugStringA
GetTickCount
GetFileType
GetCPInfo
GetTempPathA
GetStringTypeW
HeapCreate
FreeLibrary
SetEnvironmentVariableA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dc879f86b0a3cb5e4a37db68fe42c7a

Headers

File Characteristics

Imports

user32

shlwapi

msimg32

kernel32

advapi32

Sections

.text Size: 138KB - Virtual size: 137KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 28KB - Virtual size: 28KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 28KB - Virtual size: 28KB

.crt
Size: 512B - Virtual size: 216KB