039799c0ccb1226e54c71b773c784898_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

039799c0ccb1226e54c71b773c784898_JaffaCakes118
Size

208KB
MD5

039799c0ccb1226e54c71b773c784898
SHA1

88955c57d05e337984f4bec54f2590d678e2d3ad
SHA256

e56707bed866431604c858a71b75cc2d61e4e6b91cd790d434f637209ea5beed
SHA512

25610339e0230eed5edcb0753608bb51ee4cbabb953574cfba3d58b9800d057487b7f253f4f2a571ae1ace232f0ce83a96c39d8e3a6f2c556a05c34f9d1f62e6
SSDEEP

6144:vJiZ9bP+8ywaPcPZipff7bUaM81g0KHcGP:xizj+oaPcPyfTgaM81rXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039799c0ccb1226e54c71b773c784898_JaffaCakes118

Files

039799c0ccb1226e54c71b773c784898_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afab4cdde379dc4be923217c26d45db6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextFaceA
GetCharWidthA
ExtCreateRegion
ScaleWindowExtEx
PtInRegion
GdiPlayScript
GetCharacterPlacementW
GetCharWidthW
SetWindowOrgEx
PaintRgn
SetMetaFileBitsEx

user32

MapWindowPoints
GetSubMenu
TileWindows
GetWindowLongA
GetForegroundWindow
MenuItemFromPoint

advapi32

RegQueryMultipleValuesA
CryptEnumProvidersA
CryptSetProviderA
LogonUserW
CryptGetProvParam
LookupAccountSidW
RegEnumKeyExW
RegOpenKeyExA
CryptSetProviderExA
CryptReleaseContext
RegReplaceKeyW
CreateServiceW
CryptGetDefaultProviderA
RegSetKeySecurity
InitiateSystemShutdownW
LookupPrivilegeValueA
CryptDecrypt
LookupAccountNameA
RegCreateKeyExW
RegCreateKeyW
RegConnectRegistryW
RegQueryValueW

wininet

FindNextUrlCacheContainerW
SetUrlCacheConfigInfoA
InternetCombineUrlW
UrlZonesDetach
HttpQueryInfoW
FtpGetFileEx
InternetAlgIdToStringA

kernel32

ExitProcess
InitializeCriticalSection
QueryPerformanceCounter
GetProcAddress
GetCurrentThread
TlsSetValue
GetNamedPipeHandleStateW
FreeEnvironmentStringsA
GetModuleHandleA
GetSystemTimeAdjustment
HeapAlloc
GetTickCount
LoadLibraryA
HeapReAlloc
HeapFree
TerminateProcess
WriteConsoleA
GetCommandLineA
VirtualQuery
SetLastError
WriteFile
GetModuleFileNameA
GetCurrentProcessId
VirtualFree
LeaveCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
DeleteCriticalSection
SetFileTime
RtlUnwind
VirtualAlloc
EnterCriticalSection
TlsAlloc
GetSystemTimeAsFileTime
TlsFree
SetHandleCount
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineW
InterlockedExchange
TlsGetValue
GetFileType
GetCurrentProcess
HeapCreate
GetLastError
GetVersion
GetStartupInfoA
IsBadWritePtr
GetModuleFileNameW
GetStdHandle
GetStartupInfoW
MultiByteToWideChar
HeapDestroy
FreeEnvironmentStringsW

shell32

DragAcceptFiles
FreeIconList

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afab4cdde379dc4be923217c26d45db6

Headers

File Characteristics

Imports

gdi32

user32

advapi32

wininet

kernel32

shell32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 4KB - Virtual size: 26KB

.data Size: 107KB - Virtual size: 106KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 4KB - Virtual size: 26KB

.data
Size: 107KB - Virtual size: 106KB

.rsrc
Size: 2KB - Virtual size: 2KB