0773f7fa0c3bc94fd9fd49972663c757_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0773f7fa0c3bc94fd9fd49972663c757_JaffaCakes118
Size

98KB
MD5

0773f7fa0c3bc94fd9fd49972663c757
SHA1

cd4e7cda370e0c6b125892907b7d5f4777a2f28e
SHA256

e26da96c54deb781bd6c981a1ef1dd3dfaba1e9f13f38b7e3ca63acfe9f59aac
SHA512

548234dbffe1cab2e498e69a6c184536372a8b932dd90260942340c4d008858da70502a5bc65edf211d6e5d04607fd436e825e589fba0bfd674d2f2f2e64db70
SSDEEP

1536:Bcwg00YPx1qz8KqXGNT1G3gVjiaokaT8sR6aaOh29mwolfMNeMpnDvbKrmL:Bt0YDBGNM3gV3olI049mmeSTOrmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0773f7fa0c3bc94fd9fd49972663c757_JaffaCakes118

Files

0773f7fa0c3bc94fd9fd49972663c757_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c9b18d73e35acaa33cfc1ddd76dcb5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
EnumResourceNamesA
ExitProcess
GetCommandLineA
GetFileSize
GetModuleHandleA
GetStartupInfoA
HeapAlloc
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
RemoveDirectoryA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
SleepEx
VirtualAlloc

user32

EndPaint
EmptyClipboard
GetDlgItem
CharUpperBuffA
CharToOemBuffA
GetWindowTextA
MessageBoxA
SetFocus
SetMenuInfo
ShowCaret
DrawMenuBar

advapi32

RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueA

ole32

OleInitialize
OleGetClipboard
OleUninitialize
CreateILockBytesOnHGlobal
CoUninitialize
CoRegisterClassObject
RegisterDragDrop
ReleaseStgMedium
StringFromGUID2
WriteClassStg
DoDragDrop
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoInitialize

wininet

InternetGetCookieA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetOptionExA
InternetSetStatusCallbackA
InternetCrackUrlA
InternetConnectA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetCloseHandle

shell32

SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExW
SHGetDesktopFolder

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c9b18d73e35acaa33cfc1ddd76dcb5d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

wininet

shell32

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 30KB - Virtual size: 32KB

.data Size: 1KB - Virtual size: 152KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 7KB - Virtual size: 8KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 30KB - Virtual size: 32KB

.data
Size: 1KB - Virtual size: 152KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 7KB - Virtual size: 8KB