0cc49cc620e7cf09559c45ba97df0776_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cc49cc620e7cf09559c45ba97df0776_JaffaCakes118
Size

64KB
MD5

0cc49cc620e7cf09559c45ba97df0776
SHA1

23feaf933dd2feb11b17a8f4aca6d769a7eea38d
SHA256

949d7770f55cca3e246e5d45ea84615921ceaa022bfa48a9d448ffbd8323317b
SHA512

8ac42292f144399a713cdb222711a426172d5fad843e8a8e785498afc5b9d3a33a30d2b24de04e5fcbc2883f20153de0635ca1f5d3dcf64a5b58a4adab574b4f
SSDEEP

768:N0bJ8fI43yeJ2EJ6DztR0j5VbfiSYgijG0MceqXP7jOIsQoG:mdKyeJ2VXH0j3ktpMK+I1oG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc49cc620e7cf09559c45ba97df0776_JaffaCakes118

Files

0cc49cc620e7cf09559c45ba97df0776_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46fb296897da00da9e61c9ce26ce04ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetTimeFormatA
GetCurrentProcess
CreateMutexA
ReleaseMutex
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
LoadLibraryA
GetLastError
CloseHandle
FlushInstructionCache
GetCurrentThreadId
WinExec
lstrlenA
SetStdHandle
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
GetProcAddress
SetFilePointer
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
VirtualAlloc
VirtualFree
HeapCreate
WriteFile
GetVersionExA
GetEnvironmentVariableA
HeapDestroy
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringW
FreeEnvironmentStringsA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetACP
GetCPInfo
GetOEMCP
HeapSize
RaiseException
HeapFree
TerminateProcess
HeapAlloc
HeapReAlloc
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind

user32

GetWindowRect
GetDC
ReleaseDC
SetWindowPos
GetWindowLongA
GetDesktopWindow
GetSysColor
SendMessageA
GetParent
SendDlgItemMessageA
GetDlgItem
EnableWindow
SetWindowTextA
SetWindowLongA
RegisterClassA
LoadCursorA
GetClassInfoExA
wsprintfA
RegisterClassExA
CallWindowProcA
LoadMenuA
GetSubMenu
GetCursorPos
RemoveMenu
SetMenuDefaultItem
DestroyMenu
TrackPopupMenu
PostMessageA
GetMessageA
PostQuitMessage
LoadImageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
ScreenToClient
RegisterWindowMessageA
SystemParametersInfoA
SetFocus
RedrawWindow
SetTimer
BeginPaint
KillTimer
DefWindowProcA
EndPaint
FillRect
DrawTextA
CreateDialogParamA
EndDialog
CreateWindowExA
SetForegroundWindow
GetClientRect
MoveWindow
IsWindow
GetActiveWindow
DialogBoxParamA
LoadStringA
DestroyWindow
ShowWindow
EnableMenuItem

gdi32

CreateSolidBrush
SetBkColor
SetBkMode
SetTextColor
SelectObject
CreateFontA
DeleteObject
GetDeviceCaps

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA

shell32

Shell_NotifyIconA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46fb296897da00da9e61c9ce26ce04ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 19KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 19KB