168bb40a61de42360b7d6a2b6e1b2442_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

168bb40a61de42360b7d6a2b6e1b2442_JaffaCakes118
Size

102KB
MD5

168bb40a61de42360b7d6a2b6e1b2442
SHA1

240e35d5358a393cddf3d6a24154c9759a654c76
SHA256

85d0558bf6efac93b450b2878dc5aa075d91ac9b2e4f201e220b1d09ccf7405f
SHA512

ab234ce470c7fec24397ce1ed0c46120bc7b492fa7fd9669d5c8608285c2851e842a2744ea8a33a12af79980b9efc9e812686342147c7c6f69fb4f30ed524a6c
SSDEEP

1536:QCBsvRdbDBJJmlsGIoMlGAfN3sbKb2E15o7PUCYpv5KqkaXdKGMG9G:bcDcKfoON3sbU2e5UzYl5jk68v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
168bb40a61de42360b7d6a2b6e1b2442_JaffaCakes118

Files

168bb40a61de42360b7d6a2b6e1b2442_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb0cab68e8d9b23b6c3eea501a885c5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
IsBadReadPtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapReAlloc
RtlUnwind
HeapAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
GetLastError
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
GetSystemPowerStatus
LCMapStringW
GetStringTypeA
MulDiv
LoadLibraryA
GetCurrentProcess
GetProcessTimes
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynW
lstrcpyW
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
lstrcatW
lstrcmpiW
lstrlenW
lstrlenA
GetDateFormatA
GetSystemTime
IsBadWritePtr
GetStringTypeW

user32

AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetDoubleClickTime
SetDoubleClickTime
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
WindowFromPoint
DrawCaption
OffsetRect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawTextA
GetSysColorBrush
FillRect
SetWindowRgn
GetDC
SetCursorPos
GetSystemMenu
GetMenuItemCount
RemoveMenu
DrawMenuBar
GetSystemMetrics
GetWindowRect
GetCursorPos
SetRect
IntersectRect
SetRectEmpty
GetFocus
LoadBitmapA
CreateCaret
LockWindowUpdate
ShowCaret
GetDesktopWindow
GetWindowDC
ReleaseDC
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos

gdi32

GetTextExtentPoint32A
ExtTextOutA
CreateSolidBrush
ExtFloodFill
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkMode
TextOutA
DeleteDC
GetDeviceCaps
CreateFontA
Polygon
GetStockObject
CreatePolygonRgn
FillRgn
DeleteObject
GetRgnBox
SetMapMode
GetTextMetricsA
SetDIBitsToDevice
GetDIBits
BitBlt
CreateDIBSection
CreateEllipticRgn
CreateRectRgn

advapi32

IsValidSid
GetUserNameA
EncryptFileA
DecryptFileA
IsTextUnicode

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb0cab68e8d9b23b6c3eea501a885c5b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 240KB - Virtual size: 236KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 240KB - Virtual size: 236KB