0a52512abd69bfd7c3452f64e562df2e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0a52512abd69bfd7c3452f64e562df2e_JaffaCakes118
Size

300KB
MD5

0a52512abd69bfd7c3452f64e562df2e
SHA1

423f88a60d37ad7e3222768ed1d081d9e1a03bbf
SHA256

bb725a3e412988c2d449d43d585d0c5abcbc268bd3d937bdfcf22232cc40a2f9
SHA512

b0e456773210fde9c6a0da113b96b8fb1ed79fc73af76b61051167708e8ae98e309ba7ef6b440e62ca13b1e81d52c73b21db1bfae98a376f016df4de026f437e
SSDEEP

6144:wbB8IHeMQjhIWPrjAlZbXJsPAzCi7/isD:wthHeMQjZPrgZbWCCi7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a52512abd69bfd7c3452f64e562df2e_JaffaCakes118

Files

0a52512abd69bfd7c3452f64e562df2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72c63112e4e4f74bf3fbaf935205191c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
SetPriorityClass
CopyFileA
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
DeleteFileA
FindResourceA
LoadResource
LockResource
FreeResource
GetTickCount
GlobalLock
GlobalUnlock
CreateDirectoryA
GetFileAttributesA
GetStartupInfoA
GetModuleFileNameA
OpenFileMappingA
CloseHandle
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
LocalAlloc
LocalLock
LocalUnlock
LocalFree
SizeofResource
GlobalReAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
WinExec
GetCurrentProcess
FlushFileBuffers
CreateFileA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
WriteFile
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
GetFileType
GetStdHandle
SetStdHandle
LCMapStringA
SetFilePointer
ReadFile
SetHandleCount
GlobalFree
VirtualAlloc
VirtualFree
IsBadWritePtr
HeapDestroy
ExitProcess
HeapCreate
GetCommandLineA
GetModuleHandleA
GetVersion
HeapReAlloc
HeapAlloc
HeapFree
LCMapStringW
GetProcAddress
RtlUnwind
SetEndOfFile
LoadLibraryA

user32

GetClientRect
DialogBoxParamA
UnionRect
EqualRect
GetMessageA
EndDialog
MoveWindow
IntersectRect
GetWindowRect
GetCursorPos
SetRect
IsWindow
GetDC
ReleaseDC
InvalidateRect
DestroyCursor
SetTimer
KillTimer
MessageBoxA
GetDesktopWindow
LoadCursorA
SetCursor
PtInRect
GetAsyncKeyState
EndPaint
BeginPaint
CopyRect
SetDlgItemTextA
GetDlgItemTextA
GetTopWindow
GetWindow
GetClassNameA
SetWindowLongA
IsWindowVisible
GetWindowLongA
SendMessageA
GetUpdateRect
EnumWindows
LoadIconA
IsRectEmpty
UpdateWindow
TranslateMessage
DispatchMessageA
PostQuitMessage
SetClassWord
SetWindowTextA
SetForegroundWindow
TrackPopupMenu
DestroyMenu
LoadMenuA
GetSubMenu
DefWindowProcA
DestroyWindow
CreateWindowExA
RegisterClassA
OffsetRect
CheckMenuItem
SystemParametersInfoA
PostMessageA
SetWindowPos
FindWindowA
SetRectEmpty

gdi32

RealizePalette
DeleteObject
GetObjectA
DeleteDC
SetBkColor
BitBlt
SetMapMode
GetMapMode
CreateCompatibleBitmap
CreateBitmap
GetPixel
SelectObject
CreateCompatibleDC
GetDeviceCaps
GetStockObject
SetBkMode
CreatePalette
CreateDIBitmap
SelectClipRgn
SetRectRgn
CreateRectRgnIndirect
SelectPalette

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize
CoCreateInstance

winmm

mciSendCommandA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

72c63112e4e4f74bf3fbaf935205191c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 184KB - Virtual size: 188KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 184KB - Virtual size: 188KB