044f3af42862e970878a6698c0613245_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

044f3af42862e970878a6698c0613245_JaffaCakes118
Size

300KB
MD5

044f3af42862e970878a6698c0613245
SHA1

8b4917327cbfb1a8601155f736bc322a3a30f928
SHA256

19def05b6e2a5b2ddcb101c70048db7e134276dcff3d236bb50e64c2c0acbadf
SHA512

733b688e75a15a11a7678603cfb0b74f6e08e485b44d7ff002f4b73d1644827fa4997adcd0da6a29323d49014e07cb28884849de1ffe8be3072319750409305f
SSDEEP

6144:C9OlIdFFeeqcQo1SWM1GtdbgsKfya2n0sOT9ib:KNOiMGtdbgZIy9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044f3af42862e970878a6698c0613245_JaffaCakes118

Files

044f3af42862e970878a6698c0613245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

607fbb9f4d7ad1268f241f6b4f9fff2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetStartupInfoA
ExitThread
EnumResourceLanguagesA
FileTimeToDosDateTime
LeaveCriticalSection
DeleteCriticalSection
MoveFileExW
CreateFileMappingA
DeleteFileA
MapViewOfFile
GlobalFindAtomA
UnmapViewOfFile
GetCurrentThread
MulDiv
GlobalAlloc
SetFileTime
GetFileAttributesExW
SearchPathW
WritePrivateProfileStringA
FindFirstFileA
GetEnvironmentVariableW
GetTimeFormatW
GetFileTime
HeapAlloc
GetCommandLineW
SuspendThread
EnterCriticalSection
GetFileInformationByHandle
UnlockFile
CreateEventW
GetPrivateProfileIntA
lstrcpynA
LoadResource
HeapSetInformation
ResumeThread
GetStartupInfoW
GetACP
CompareFileTime
GetVersionExW
_llseek
GetModuleHandleW
GetDiskFreeSpaceA
QueryDosDeviceA
LocalLock
DuplicateHandle
LoadLibraryW
GetTempFileNameW
TerminateProcess
GetTempFileNameA
lstrcpyA
DeleteFileW
CreateSemaphoreA
TlsAlloc
GlobalDeleteAtom
ReadFile
GetComputerNameW
SetLastError
MoveFileW
SetConsoleCtrlHandler
WritePrivateProfileSectionA
GetExitCodeProcess
GetExitCodeThread
lstrcmpW
GlobalFindAtomW
GetConsoleMode
SetErrorMode
GetModuleFileNameA
WaitForMultipleObjects
SetEnvironmentVariableW
GetProcessAffinityMask
GetSystemInfo
ExpandEnvironmentStringsA
VirtualFree
GlobalGetAtomNameW
OpenMutexA
WriteProfileStringA
GetSystemTime
VirtualAlloc
GetModuleHandleA

advapi32

OpenServiceW
SetServiceStatus
CreateServiceW
AddAce
RegSetValueA
AccessCheck
GetSecurityDescriptorGroup
ImpersonateLoggedOnUser
GetSidSubAuthority
RegFlushKey

user32

IsWindow
CharUpperA
SetDlgItemTextA
GetWindowLongA
CallWindowProcA
ShowWindow
CreateWindowExA
SetPropW
CopyImage
IsCharAlphaNumericW
BeginPaint
GetMenuStringA
PostMessageA
TranslateAcceleratorW
GetSysColor
GetMessageA
GetParent
LoadStringA
SystemParametersInfoA
ScrollWindow
GetWindowPlacement
SetForegroundWindow
GetUserObjectInformationW
DdeCreateStringHandleW
GetWindowRgn
FindWindowW
GetKeyboardState
CopyRect
DestroyMenu
EndDialog
CheckRadioButton
EndMenu
SendNotifyMessageA
DestroyIcon
SetDlgItemTextW
GetClassNameW
FindWindowExA
IsMenu
SetMessageQueue
MessageBoxIndirectW
GetWindowTextLengthA
GetDlgItemTextW
RegisterClassW
ModifyMenuA
IsRectEmpty

gdi32

GetLayout
GetTextExtentPoint32A
CreatePen
GetEnhMetaFilePaletteEntries
BitBlt
CreateRoundRectRgn
CreatePalette
Escape
GetCharWidthA
Ellipse
ScaleWindowExtEx
GetTextExtentPointW
SetWindowOrgEx
Chord
SetMapperFlags
StartPage
CreatePenIndirect
GetDIBColorTable
GetRegionData
ExtTextOutA

shlwapi

StrCatBuffA

winspool.drv

OpenPrinterW

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

oleaut32

VariantClear

msvcrt

time
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
fread
longjmp
wcstod
_wtoi
_snwprintf
_errno
_stricmp
wcscspn
_beginthreadex
swprintf
free
toupper
_wtol
realloc
_c_exit
setlocale
srand
_expand
isspace
wcsncmp
memmove
wcslen
_vsnprintf
_ltow
exit
_purecall
_controlfp
wcscpy
towlower
wcsstr
localtime
_wsplitpath
_wcsdup
_wcsicmp
malloc
_exit
towupper
calloc
_CxxThrowException
ctime
_except_handler3
__set_app_type
__p__fmode
_wcsnicmp
wcstok
wcstol
_itoa
_setmbcp
strrchr
wcscmp
__p__commode

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

icyqcu
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

amkwm
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

muqwam
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

607fbb9f4d7ad1268f241f6b4f9fff2e

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

shlwapi

winspool.drv

version

oleaut32

msvcrt

Sections

.text Size: 196KB - Virtual size: 192KB

icyqcu Size: 48KB - Virtual size: 47KB

amkwm Size: 16KB - Virtual size: 14KB

muqwam Size: 36KB - Virtual size: 33KB

.text
Size: 196KB - Virtual size: 192KB

icyqcu
Size: 48KB - Virtual size: 47KB

amkwm
Size: 16KB - Virtual size: 14KB

muqwam
Size: 36KB - Virtual size: 33KB