094c5daba5e48e7f29c2a580e6a5966e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

094c5daba5e48e7f29c2a580e6a5966e_JaffaCakes118
Size

606KB
MD5

094c5daba5e48e7f29c2a580e6a5966e
SHA1

2c3d0b62681351650778b4d929e13dde999c32cf
SHA256

685a5af085a382f8f8a300846792d2003d1274b3f783f5e6713859585668e0d4
SHA512

7f1e33a5e129c1cf076911582566f48c73835c5f10a5d858f954f3aea1bfada727f6ff5221d83e31fbc99d5f486c21a009b567cee108dc5f699786e3a80f983c
SSDEEP

12288:2IdSxZzF2XaOD6Whc2bo68lcgGFor/wF8h2OZ7tF:2WSjZ2qq6WhnoZ7GFor/Lhf7tF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094c5daba5e48e7f29c2a580e6a5966e_JaffaCakes118

Files

094c5daba5e48e7f29c2a580e6a5966e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fe9323aaebf72e7e7f04cd4bf069177

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

__p__fmode
_mbscmp
__set_app_type
wcslen
_except_handler3
malloc
memmove
__setusermatherr
_ftol
_exit
_initterm
_adjust_fdiv
free
__getmainargs
exit
sprintf
rename
_controlfp
_acmdln
wcscpy
__dllonexit
_onexit
??1exception@@UAE@XZ
_mbsstr
__CxxFrameHandler
printf
_XcptFilter
__p__commode
_mbsnbcpy
??1type_info@@UAE@XZ
_setmbcp

kernel32

RemoveDirectoryA
GetLastError
SetFileAttributesA
SearchPathA
Sleep
CreateFileA
OpenProcess
SetProcessShutdownParameters
Process32Next
GetVersion
CreateProcessA
lstrcatA
CreateSemaphoreA
FindFirstFileA
FreeLibrary
FindNextFileA
LoadLibraryA
FindResourceA
CreateToolhelp32Snapshot
GetFileSize
GetVersionExA
Process32First
GetModuleHandleA
ReadFile
lstrlenA
DeleteFileA
GetDriveTypeA
ExitProcess
Module32First
GetFileAttributesA
LockResource
TerminateProcess
CloseHandle
SetFilePointer
GetModuleFileNameA
GetPrivateProfileStringA
GetTempPathA
lstrcpyA
WritePrivateProfileStringA
lstrcmpiA
CreateDirectoryA
GetLogicalDrives
LoadResource
GetCurrentProcess
GetWindowsDirectoryA
DeviceIoControl
WriteFile
lstrlenW
GetCPInfo
Module32Next
WinExec
GetStartupInfoA
FindClose

comctl32

ImageList_Draw
ImageList_GetImageCount
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetIcon
ImageList_AddMasked

shell32

ShellExecuteA
SHEmptyRecycleBinA
Shell_NotifyIconA
ShellExecuteExA
SHGetSpecialFolderPathA

wininet

FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry

user32

AppendMenuA
GetMessagePos
DrawFocusRect
GetPropA
GetDesktopWindow
GetSubMenu
GetWindowLongA
LoadImageA
GetMenuItemID
TabbedTextOutA
SendMessageA
EnumWindowStationsA
DrawIconEx
OffsetRect
LoadCursorA
IsMenu
GetParent
GetWindow
GetSysColorBrush
GetActiveWindow
IsWindow
CopyIcon
ShowWindow
ReleaseDC
SetPropA
LoadMenuA
CreatePopupMenu
WindowFromPoint
GetMenuItemCount
ScreenToClient
DrawEdge
FrameRect
GetLastActivePopup
PtInRect
CreateMenu
SetRect
SetTimer
MessageBeep
KillTimer
FindWindowA
SetCursor
EnableWindow
GrayStringA
GetWindowRect
ExitWindowsEx
GetCursorPos
ModifyMenuA
RegisterWindowMessageA
DrawIcon
GetMenuState
DestroyIcon
DrawTextA
GetDC
GetNextDlgTabItem
ClientToScreen
FillRect
SetMenuDefaultItem
InvalidateRect
GetClientRect
IsIconic
GetMenuItemInfoA
SetWindowLongA
SystemParametersInfoA
CopyRect
GetIconInfo
GetSystemMetrics
RemovePropA
InflateRect
SetForegroundWindow
LoadBitmapA
CreateIconIndirect
GetSysColor
PostMessageA
GetMenuStringA
DrawStateA
wsprintfA
DestroyCursor
LoadIconA

version

GetFileVersionInfoA

gdi32

CreateCompatibleBitmap
GetBkMode
CreateCompatibleDC
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateBitmap
DeleteObject
CreatePen
GetPixel
BitBlt
DeleteDC
ExtTextOutA
CreateSolidBrush
CreateFontIndirectA
SetTextColor
PatBlt
GetDeviceCaps
SetPixel
TextOutA
Escape
GetObjectA
CreateFontA
SelectObject
Ellipse
GetStockObject
PtVisible
SetBkColor
RectVisible
CreateDIBSection

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.strings
Size: 5KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fe9323aaebf72e7e7f04cd4bf069177

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

shell32

wininet

user32

version

gdi32

Sections

.text Size: 336KB - Virtual size: 335KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 347KB - Virtual size: 346KB

.strings Size: 5KB - Virtual size: 696KB

.text
Size: 336KB - Virtual size: 335KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 347KB - Virtual size: 346KB

.strings
Size: 5KB - Virtual size: 696KB