14a9e6f5c7fde93cd3e27361a8a21d30_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14a9e6f5c7fde93cd3e27361a8a21d30_JaffaCakes118
Size

119KB
MD5

14a9e6f5c7fde93cd3e27361a8a21d30
SHA1

d834598f939f7a548c823c827297ebb3704f710b
SHA256

eb454fddefad0df14638a48e7177510437c2e293942db52ec6ad06bad4c5f134
SHA512

a4fa15fd0745b583fdc28cd9a9e8d61cb219e1e564f0c4f24e819e964ad8c427c6eeafa824fd3a3062f4da7922e3163b03bf11fa6033fcea43638172f5fe59ac
SSDEEP

3072:QIj9KZWWzuWrtyAtoKUz7lm9rdp8YLhxsR:QIsAWyCilmRZLhC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a9e6f5c7fde93cd3e27361a8a21d30_JaffaCakes118

Files

14a9e6f5c7fde93cd3e27361a8a21d30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd8a9cb6feec1e35f4d75c23d93701f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
sprintf
fabs
ceil
malloc
floor
free
fclose
strstr
strncmp
memmove
memcpy
strcmp
strlen
strcpy
strcat
strncpy
atoi
_strnicmp
localtime
mktime
gmtime

kernel32

GetModuleHandleA
HeapCreate
WinExec
HeapDestroy
ExitProcess
GetComputerNameA
LoadLibraryA
FindResourceA
LoadResource
SizeofResource
LockResource
FreeLibrary
GetSystemDefaultLCID
GetLocaleInfoA
IsBadCodePtr
HeapAlloc
HeapFree
InitializeCriticalSection
TlsAlloc
GetProcAddress
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
GetEnvironmentVariableA
SetEnvironmentVariableA
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
CreateFileA
ReadFile
CreateThread
Sleep
HeapReAlloc
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
CopyFileA
GetTempPathA
WriteFile
SetFilePointer
GetFileSize
GetLocalTime
MultiByteToWideChar

comctl32

InitCommonControls
InitCommonControlsEx

user32

DestroyWindow
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetWindowRect
GetSystemMetrics
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
DestroyIcon
FillRect
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
CharLowerA
CharUpperA

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

oleaut32

SysAllocString

ole32

CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
RevokeDragDrop
CoInitialize

shell32

ShellExecuteA
ShellExecuteExA

urlmon

URLDownloadToFileA

wsock32

WSAStartup
gethostbyname
WSACleanup
inet_ntoa
inet_addr
WSAGetLastError
getsockname
ntohs
closesocket
socket
htons
connect
ioctlsocket
gethostname
recv
recvfrom
send
sendto
bind
listen
accept

winmm

timeBeginPeriod
timeEndPeriod

iphlpapi

SendARP

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd8a9cb6feec1e35f4d75c23d93701f5

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

advapi32

oleaut32

ole32

shell32

urlmon

wsock32

winmm

iphlpapi

Sections

.code Size: 6KB - Virtual size: 6KB

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 6KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 700B