fc3301a7d15c7d7a57a927a2b0249d1a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc3301a7d15c7d7a57a927a2b0249d1a_JaffaCakes118
Size

1.2MB
MD5

fc3301a7d15c7d7a57a927a2b0249d1a
SHA1

f70889f155c2061edebcbe90f2db5440b4ad3468
SHA256

e34607b99dfa9f96eb7253be1f8c983a9a285e27391c61b96de09fc52be243ed
SHA512

da975e35d4008b09d5f7af583b876ba4b692c09302318847a768d3f2b5c152f9aabed7aa9ff5e1bb6de2c448db3f64432630de4eb678822033cd51a8cf3739a1
SSDEEP

24576:Wen2O9t5yfATEVdOvSpKPTYn6AboFxKfNJ3H/0jEzUHNVSgH:Wen2OL5yhGv6KPk6zxi/1IH/SgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc3301a7d15c7d7a57a927a2b0249d1a_JaffaCakes118

Files

fc3301a7d15c7d7a57a927a2b0249d1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1e119a585b543f693a68383a24779c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
lstrcmpiA
lstrcpynA
lstrcmpA
lstrcpyA
WaitForSingleObject
CreateMutexA
GetOEMCP
lstrcatA
CreateProcessA
OpenProcess
GetCurrentProcessId
Sleep
GetTempPathA
CreateDirectoryA
DeleteFileA
GetTempFileNameA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetModuleFileNameA
CloseHandle
SetThreadPriority
CreateThread
FindClose
FindNextFileA
RemoveDirectoryA
FindFirstFileA
WriteFile
ReadFile
CreateFileA
GetVersionExA
GetProcAddress
HeapAlloc
GetProcessHeap
GetModuleHandleA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
HeapReAlloc
VirtualAlloc
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
SetFilePointer
GetStringTypeW
SetEnvironmentVariableA
lstrlenA
GetFullPathNameA
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
GetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetCurrentDirectoryA
TerminateProcess
GetCPInfo
GetACP
GetFileType
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle

user32

SetForegroundWindow
SetWindowTextA
GetWindowRect
EnumWindows
GetWindowThreadProcessId
PostQuitMessage
PostMessageA
GetDesktopWindow
CreateDialogParamA
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
MessageBoxA
wsprintfA
ShowWindow
MoveWindow

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1e119a585b543f693a68383a24779c8

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 19KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 19KB

.rsrc
Size: 3KB - Virtual size: 2KB