185c4a474c7d13603740f7d9117434cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

185c4a474c7d13603740f7d9117434cb_JaffaCakes118
Size

308KB
MD5

185c4a474c7d13603740f7d9117434cb
SHA1

38d70678782180e0e16f282d6002293f94366dfe
SHA256

25e869a19eaa40a9b445bf19c4427940b3fa3067b341d6577f7280d20ae48e2e
SHA512

a012f5169f899c6d100a43e3b19bc9427947fcff0e1baad2be4fc6201cf63d88b99609a312fe2ce82fe76cc4d10975e3cd96e74e3323269937232e04953e2534
SSDEEP

6144:FG1lU9HSHY6C4lPBo5XIPKgL/7NWv3d1RzCen/YrMlpSjXFhJEA6lw:j9y4qGXIHL/sv3ZdYrMWfoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
185c4a474c7d13603740f7d9117434cb_JaffaCakes118

Files

185c4a474c7d13603740f7d9117434cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8455de0847413283869fb3a83597dd06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcpyW
SetCurrentDirectoryW
CompareFileTime
CreateProcessW
SetEvent
GlobalFree
Sleep
WaitForMultipleObjects
lstrcpynW
GetTickCount
lstrcatW
SetPriorityClass
GetCurrentProcess
FileTimeToLocalFileTime
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
GetWindowsDirectoryW
CreateDirectoryW
DeleteFileW
SetFileAttributesW
lstrlenW
GetFullPathNameW
GlobalLock
GlobalSize
CreateThread
GlobalUnlock
FindNextFileW
FindCloseChangeNotification
GetDriveTypeW
GetLogicalDriveStringsW
CreateFileW
GetFileSize
SetFilePointer
ReadFile
WriteFile
GetVolumeInformationW
GetDiskFreeSpaceW
FileTimeToSystemTime
CreateEventW
VirtualAlloc
VirtualFree
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetCommandLineW
FindNextChangeNotification
CloseHandle
InitializeCriticalSection
RemoveDirectoryW
GetModuleHandleW
GetProcAddress
CopyFileW
InterlockedDecrement
InterlockedIncrement
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MoveFileW
FindFirstFileW
GetTempPathW
WaitForSingleObject
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
AreFileApisANSI
GetCompressedFileSizeW
GetLastError
GetTempFileNameW
FindClose
FindFirstChangeNotificationW

user32

ChildWindowFromPointEx
PostMessageW
RegisterClipboardFormatW
WindowFromPoint
IsWindowEnabled
ScreenToClient
SetWindowTextW
DestroyMenu
GetMenuItemCount
PostQuitMessage
MessageBoxW
MoveWindow
GetWindowLongW
SetWindowLongW
AppendMenuW
CreatePopupMenu
GetCursorPos
GetSubMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemInfoW
SetMenuItemInfoW
GetMenu
LoadMenuW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyW
GetKeyState
CallWindowProcW
TrackPopupMenuEx
EndDialog
GetParent
EnableWindow
ShowWindow
GetWindowRect
LoadBitmapW
CreateWindowExW
DestroyWindow
SendMessageW
SetFocus
SetMenu
DrawMenuBar
IsZoomed
GetClientRect
ReleaseCapture
SetCapture
GetCapture
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
GetWindowPlacement
SetWindowPlacement
CharUpperW
GetWindowTextLengthW
GetWindowTextW
LoadStringW
InsertMenuItemW
GetClassInfoW
LoadCursorW
RegisterClassW
DialogBoxParamW
KillTimer
GetDlgItem
IsDlgButtonChecked
CheckDlgButton
ClientToScreen
SetDlgItemTextW
wsprintfW
DefWindowProcW

gdi32

DeleteObject

comdlg32

GetOpenFileNameW

advapi32

RegSetValueExW
RegEnumKeyExW
RegQueryValueExA
RegQueryValueExW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder
SHGetMalloc

ole32

OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
DoDragDrop

oleaut32

SysFreeString
SysAllocString
VariantClear

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_GetImageCount
InitCommonControlsEx
CreateStatusWindowW
CreateToolbarEx
ord17
PropertySheetW
ImageList_Create

mpr

WNetCloseEnum
WNetEnumResourceW
WNetGetResourceParentW
WNetGetResourceInformationW
WNetAddConnection2W
WNetOpenEnumW

msvcrt

__getmainargs
sprintf
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_acmdln
_initterm
_except_handler3
??1type_info@@UAE@XZ
_onexit
__dllonexit
getc
fclose
_wfopen
_iob
rand
srand
free
malloc
_controlfp
strlen
qsort
memset
memcpy
_purecall
wcscpy
_CxxThrowException
memmove
memcmp
__CxxFrameHandler
_adjust_fdiv
__setusermatherr
__p__fmode
__p__commode
_wcsicmp
__set_app_type

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8455de0847413283869fb3a83597dd06

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

mpr

msvcrt

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 68KB - Virtual size: 70KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 68KB - Virtual size: 70KB

.rsrc
Size: 39KB - Virtual size: 39KB