fa9f0be76249245531c0d0647ee75e52_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa9f0be76249245531c0d0647ee75e52_JaffaCakes118
Size

172KB
MD5

fa9f0be76249245531c0d0647ee75e52
SHA1

f51d6172a5220814e83bdbbddcdf66fdb74578cd
SHA256

c81fb21dda95b000b2acc2fd7fc2554f6cfa3c545abfe078be5f3cb1c65c2fda
SHA512

7071276f14986d46ef4e9a739ce084209adff8b82da9c607bfcff409b160f6db1f4e1c5bf2d37ddde125e5304a31b52ce0b23e29cb7e673ed92a7b2c17a7c322
SSDEEP

3072:xqWryec9POeW75jWCCp76qRTseRoV/z6pJv5kV90Pqfq/81mC9sJL8zjjoLnJ3xX:xqQXc9z+5jixbEWxwhy+m9h8zjjolBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9f0be76249245531c0d0647ee75e52_JaffaCakes118

Files

fa9f0be76249245531c0d0647ee75e52_JaffaCakes118
.exe windows:1 windows x86 arch:x86

02515726e766caa14aadb0ebbaee9ac7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
FreeLibrary
GetSystemDirectoryA
GetExitCodeThread
WideCharToMultiByte
FindFirstFileA
SetErrorMode
SetThreadAffinityMask
ReadFile
LocalFree
GlobalMemoryStatus
FileTimeToSystemTime
LCMapStringA
TlsFree
GetDriveTypeA
SetEndOfFile
GetCurrentProcess
Module32First
IsBadStringPtrA
GetFileAttributesA
lstrcmpA
GetModuleHandleA
Module32Next
Sleep
GetProcessWorkingSetSize
FlushFileBuffers
LeaveCriticalSection
GetCurrentThread
ExpandEnvironmentStringsA
IsBadStringPtrW
InterlockedIncrement
GetOEMCP
MulDiv
GetStartupInfoA
InitializeCriticalSection
GetFileType
CreateEventA
LoadLibraryA
GetCurrentDirectoryA
GetStringTypeW
SetEnvironmentVariableA
LCMapStringW
IsValidCodePage
MultiByteToWideChar
DeleteCriticalSection
GlobalReAlloc
SizeofResource
SetFilePointer

user32

CheckRadioButton
CheckMenuRadioItem
PeekMessageA
DispatchMessageA
EndDeferWindowPos
DrawEdge
FillRect
DrawMenuBar
IsIconic
SetClassLongA
AppendMenuA
DestroyWindow
TranslateAcceleratorA
InvalidateRect
GetWindowTextA
RedrawWindow
MapWindowPoints
GetScrollInfo
ShowWindowAsync
EndDialog
ScrollWindowEx
InsertMenuA
SetMenuItemInfoA
GetSysColorBrush
LoadStringA
GetWindowLongA
SetWindowPlacement
RemoveMenu
PostMessageA
GetWindow
TrackPopupMenuEx
CreatePopupMenu
BeginPaint
GetKeyState
MoveWindow
DrawTextA
GetDC
EnableMenuItem
ClientToScreen
SetCapture
SetFocus
EnumChildWindows
ReleaseDC
GetWindowThreadProcessId
DrawIconEx
GetUpdateRgn
GetDlgCtrlID
GetDlgItemTextA

msvcrt

__setusermatherr
_adjust_fdiv
memcpy
_acmdln
__p__fmode
_controlfp
__getmainargs
_initterm
__p__commode
__set_app_type
_except_handler3
_exit
_XcptFilter
exit

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02515726e766caa14aadb0ebbaee9ac7

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 180KB

.rsrc Size: 131KB - Virtual size: 131KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 180KB

.rsrc
Size: 131KB - Virtual size: 131KB