fd44d225d6d119a1dc9ca0da40811734_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fd44d225d6d119a1dc9ca0da40811734_JaffaCakes118
Size

258KB
MD5

fd44d225d6d119a1dc9ca0da40811734
SHA1

0770020f050f94e696cda54f4dd2dea527ebad69
SHA256

9cdb5ce9aa5c047d3f7405f692656da42c3fa662fed571c064a6c6f009cc3080
SHA512

67c641f193bc671f19c20f58688164f41de36c04dcc1378eb5bad745bbc3bd09ae555c9cb64a314a8ed9a1f01c7d1d2c9472137c26dd6a8479171fbb17a90cdc
SSDEEP

6144:KUMbdFnqarKpBZvDF0NUiaGTUemiS12oJuS+I2:fMFnJKRvDFUUZQO2oES+I2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd44d225d6d119a1dc9ca0da40811734_JaffaCakes118

Files

fd44d225d6d119a1dc9ca0da40811734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af03bbd9a6c51f9a2745b3e8414975d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
GetVersion
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
GetDlgItemTextW
CharLowerW
RegisterClassExA
wsprintfA
GetCaretPos
DialogBoxIndirectParamA
MonitorFromWindow
MonitorFromPoint
SetWindowPos
EnableMenuItem
AppendMenuW
InsertMenuItemW
PeekMessageA
CharPrevW
FindWindowA
CreateDesktopW
WaitForInputIdle
GetMenu
GetMessageW
AdjustWindowRect
GetSysColorBrush
GetClassInfoW
LoadIconA
SetCapture
OpenClipboard
GetMenuItemCount
SetCursor
RegisterWindowMessageW
MessageBoxIndirectA
LoadImageA
SetFocus
SetParent
LoadMenuW
CharUpperW
GetDlgItemInt
FindWindowW
MonitorFromRect
IsChild
MessageBoxIndirectW
CopyIcon
GetMenuItemInfoW
CheckMenuItem
LoadCursorW
ShowWindow
CreateWindowExA
SetDlgItemInt
WinHelpA

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateColorSpaceA
CreateHatchBrush
CreateFontW
CreateDIBPatternBrush
CreateBrushIndirect
SetEnhMetaFileBits
ExtCreateRegion
UpdateICMRegKeyA
CreateEllipticRgn

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

EditStreamClone
AVIStreamBeginStreaming
EditStreamPaste
AVIStreamGetFrameClose
AVIStreamInfo
AVIFileInfoW
AVIGetFromClipboard
AVISaveW
AVIStreamWrite
AVIStreamFindSample
EditStreamSetName
AVIFileOpenW

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hs
Size: 109KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hBd
Size: 109KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af03bbd9a6c51f9a2745b3e8414975d6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

CODE Size: 9KB - Virtual size: 8KB

.edata Size: 13KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 43KB

.hs Size: 109KB - Virtual size: 119KB

.data Size: 5KB - Virtual size: 275KB

.hBd Size: 109KB - Virtual size: 164KB

.rsrc Size: 8KB - Virtual size: 8KB

CODE
Size: 9KB - Virtual size: 8KB

.edata
Size: 13KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 43KB

.hs
Size: 109KB - Virtual size: 119KB

.data
Size: 5KB - Virtual size: 275KB

.hBd
Size: 109KB - Virtual size: 164KB

.rsrc
Size: 8KB - Virtual size: 8KB