0af97e80abed0a1b668ceef5c0f53f9c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0af97e80abed0a1b668ceef5c0f53f9c_JaffaCakes118
Size

160KB
MD5

0af97e80abed0a1b668ceef5c0f53f9c
SHA1

34b6698cfde5564d5f59f771c42d8afb22824d3d
SHA256

fa916958261980664f6428f7680688b5396056033ebccbe155938cb3d473ab73
SHA512

da3c8138760a8c46a14a57c7db28403560fb3d527a6b5208532d999c5f4eae97ef7995b260bed8b62efbfc89090302f6e21954c4d91be461f8b22f384f56c6de
SSDEEP

3072:/XcK0R/0b+YOUCh6+QsuNM9baxRJyEv65bAWt3bKG3Ttc48DX0avM78NhPbp:EKs/0b/OZU0YoF5MWt3ek/8PPN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af97e80abed0a1b668ceef5c0f53f9c_JaffaCakes118

Files

0af97e80abed0a1b668ceef5c0f53f9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f779ba733fe09bbc41ec56db49c53fa3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

CreateErrorInfo
DispGetIDsOfNames
BstrFromVector
OleLoadPictureEx
GetErrorInfo

kernel32

GetVersionExW
GlobalLock
GlobalAlloc
GlobalReAlloc
GetModuleHandleW
GlobalSize
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
GlobalHandle
IsDBCSLeadByte
GetModuleHandleA
VirtualProtect
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GlobalFree
GlobalUnlock
GetCurrentThread
lstrlenA
MulDiv
MultiByteToWideChar
FreeLibrary
RaiseException
LoadLibraryA
FormatMessageA
GetSystemDirectoryW

setupapi

CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents

user32

SetWindowLongA
SetWindowTextA
SendMessageA
GetDlgItem
wsprintfA
WaitForInputIdle
CharUpperA
MessageBoxA

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f779ba733fe09bbc41ec56db49c53fa3

Headers

File Characteristics

Imports

oleaut32

kernel32

setupapi

user32

Sections

.text Size: 147KB - Virtual size: 147KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 234B

.text
Size: 147KB - Virtual size: 147KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 234B