00e77ddb14d27a1155f75d598e3166b1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

00e77ddb14d27a1155f75d598e3166b1_JaffaCakes118
Size

140KB
MD5

00e77ddb14d27a1155f75d598e3166b1
SHA1

8b82047a990b704b12bd6cbe853624935d57b3d8
SHA256

e350893d68bd7fdd1a93cd4d3418edbb62177c9e503fb9360ffb5b6bc230c0e8
SHA512

7cf0c125d113ce026f4ca5d4cd6d003e998271d6c6a88394dba8fda419b420e02aa0667ff0f45579b00ef99a82a87024c0e0ee1bc17fc67f5e9dc74f58107f6c
SSDEEP

1536:nxxYpSHLWpgQBReysJC/2ZaYTEdzhUdm7PckOUGJPgUrmd+px:x1HZaReysJC1hcmLcZvJPgUrJpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e77ddb14d27a1155f75d598e3166b1_JaffaCakes118

Files

00e77ddb14d27a1155f75d598e3166b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edda22d00180e698765440e081c6c93c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

PropertySheetA
ord17

kernel32

lstrlenA
FormatMessageA
lstrcpyA
GetCommandLineA
WideCharToMultiByte
TlsAlloc
RtlUnwind
TlsFree
HeapAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
ReadFile
SetFilePointer
InterlockedDecrement
GetModuleHandleA
IsValidCodePage
IsValidLocale
GetLocaleInfoA
GetStringTypeW
LocalFree
LocalHandle
GetVersionExA
MultiByteToWideChar
lstrcmpiA
GetLastError
GetFullPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
UnmapViewOfFile
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
CreateThread
CreateEventA
SetEvent
lstrlenW
HeapFree
EnumSystemLocalesA
GetProcessHeap
HeapReAlloc
InterlockedIncrement
GetStringTypeA
VirtualAlloc
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
SetStdHandle
FlushFileBuffers
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
GetUserDefaultLCID
WriteFile
FatalAppExitA
Sleep
LCMapStringA
LCMapStringW

user32

wsprintfA
PostMessageA
EnumThreadWindows
KillTimer
IsWindowVisible
CharNextA
SetTimer
CreateWindowExA
RegisterClassA
GetClassInfoA
PostQuitMessage
SetWindowLongA
GetDesktopWindow
GetParent
DispatchMessageA
GetMessageA
DialogBoxParamA
EndDialog
GetWindowTextA
GetWindowTextLengthA
wvsprintfA
EnableWindow
SetDlgItemInt
GetDlgItem
SendMessageA
LoadStringA
SetDlgItemTextA
WinHelpA
LoadIconA
MessageBoxA
GetActiveWindow
SetFocus
CheckDlgButton
DefWindowProcA
GetDlgItemInt
GetWindowLongA
IsDlgButtonChecked

urlmon

CreateURLMoniker

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

ole32

CreateBindCtx
CLSIDFromString
CoInitialize
CLSIDFromProgID
MkParseDisplayName
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayCreate
SafeArrayDestroy
SafeArrayPutElement
SafeArrayGetUBound
LoadRegTypeLi
SysAllocStringLen
SetErrorInfo
SysFreeString
CreateErrorInfo
SysAllocString
VariantChangeType
LoadTypeLi
VariantClear
SafeArrayGetElement
VariantInit
SysStringLen

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

edda22d00180e698765440e081c6c93c

Headers

File Characteristics

Imports

comctl32

kernel32

user32

urlmon

version

advapi32

ole32

oleaut32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 36KB - Virtual size: 36KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 36KB - Virtual size: 36KB