042a15b6a2f319889f5bc4fc0218cd81_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

042a15b6a2f319889f5bc4fc0218cd81_JaffaCakes118
Size

300KB
MD5

042a15b6a2f319889f5bc4fc0218cd81
SHA1

65c329805a6c3dd6662f7e9722c7cf4bc6d84dd2
SHA256

a6c519ac6df3a7bead6dcbbba68ec59612fea32c6a856dcaeb127c85130a3259
SHA512

dd9393c924baa7f9e860d59d3e12fc58d5f929b0d39e501fb5933b57e4727b70fe20f57e024bc5f7ee08b540311eca2ffeb7386ec7fff1a3d310f44974cb1189
SSDEEP

6144:QbB8IHeMQjhIWPrjAlZbXJsPAzCY7/isD:QthHeMQjZPrgZbWCCY7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042a15b6a2f319889f5bc4fc0218cd81_JaffaCakes118

Files

042a15b6a2f319889f5bc4fc0218cd81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72c63112e4e4f74bf3fbaf935205191c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
SetPriorityClass
CopyFileA
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
DeleteFileA
FindResourceA
LoadResource
LockResource
FreeResource
GetTickCount
GlobalLock
GlobalUnlock
CreateDirectoryA
GetFileAttributesA
GetStartupInfoA
GetModuleFileNameA
OpenFileMappingA
CloseHandle
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
LocalAlloc
LocalLock
LocalUnlock
LocalFree
SizeofResource
GlobalReAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
WinExec
GetCurrentProcess
FlushFileBuffers
CreateFileA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
WriteFile
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
GetFileType
GetStdHandle
SetStdHandle
LCMapStringA
SetFilePointer
ReadFile
SetHandleCount
GlobalFree
VirtualAlloc
VirtualFree
IsBadWritePtr
HeapDestroy
ExitProcess
HeapCreate
GetCommandLineA
GetModuleHandleA
GetVersion
HeapReAlloc
HeapAlloc
HeapFree
LCMapStringW
GetProcAddress
RtlUnwind
SetEndOfFile
LoadLibraryA

user32

GetClientRect
DialogBoxParamA
UnionRect
EqualRect
GetMessageA
EndDialog
MoveWindow
IntersectRect
GetWindowRect
GetCursorPos
SetRect
IsWindow
GetDC
ReleaseDC
InvalidateRect
DestroyCursor
SetTimer
KillTimer
MessageBoxA
GetDesktopWindow
LoadCursorA
SetCursor
PtInRect
GetAsyncKeyState
EndPaint
BeginPaint
CopyRect
SetDlgItemTextA
GetDlgItemTextA
GetTopWindow
GetWindow
GetClassNameA
SetWindowLongA
IsWindowVisible
GetWindowLongA
SendMessageA
GetUpdateRect
EnumWindows
LoadIconA
IsRectEmpty
UpdateWindow
TranslateMessage
DispatchMessageA
PostQuitMessage
SetClassWord
SetWindowTextA
SetForegroundWindow
TrackPopupMenu
DestroyMenu
LoadMenuA
GetSubMenu
DefWindowProcA
DestroyWindow
CreateWindowExA
RegisterClassA
OffsetRect
CheckMenuItem
SystemParametersInfoA
PostMessageA
SetWindowPos
FindWindowA
SetRectEmpty

gdi32

RealizePalette
DeleteObject
GetObjectA
DeleteDC
SetBkColor
BitBlt
SetMapMode
GetMapMode
CreateCompatibleBitmap
CreateBitmap
GetPixel
SelectObject
CreateCompatibleDC
GetDeviceCaps
GetStockObject
SetBkMode
CreatePalette
CreateDIBitmap
SelectClipRgn
SetRectRgn
CreateRectRgnIndirect
SelectPalette

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize
CoCreateInstance

winmm

mciSendCommandA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72c63112e4e4f74bf3fbaf935205191c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 184KB - Virtual size: 182KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 184KB - Virtual size: 182KB