184e0b8a15977f09f2d08d07168550e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

184e0b8a15977f09f2d08d07168550e6_JaffaCakes118
Size

744KB
MD5

184e0b8a15977f09f2d08d07168550e6
SHA1

9bfba8d1db50f9b7ca99303f3855d8da45d2dbe8
SHA256

a58783ee6c2818f5bb4840bc479a644918057f58f8274583414382d16eb580cc
SHA512

bf520bf047b0c2c557f99d7cdc24769c101d66508143e4baa29a3945c16232903ab8557d6f2ca07478b68f61166e0b79c91f608dea5b842afa28c85d3a8dd4f6
SSDEEP

12288:PB1dhwvRL0S8PgBBAW43xOd1y4/QN2wFf4EuPExuawHQMkW11eEroa5/lja8IOO9:lhe0S8YBBAW31y4/QN24VuPExuawHPkP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
184e0b8a15977f09f2d08d07168550e6_JaffaCakes118

Files

184e0b8a15977f09f2d08d07168550e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75c3811b239a6c75e270610d830e276d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetErrorMode
LoadLibraryA
GetACP
IsDBCSLeadByte
GetCPInfo
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateProcessA
WaitForMultipleObjects
CreateThread
GetLastError
ExitThread
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetStartupInfoA
GetCommandLineA
GlobalUnlock
GlobalLock
lstrlenA
GetModuleHandleA
ExitProcess
GetProcAddress
GlobalAlloc
QueryPerformanceCounter
GlobalFree

user32

ClientToScreen
DeleteMenu
LoadMenuA
ScreenToClient
TrackPopupMenu
WindowFromPoint
GetCursorPos
FillRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
MessageBoxA
PostMessageA
GetDlgItem
GetWindowTextLengthA
GetDlgItemTextA
EnableWindow
GetWindowLongA
GetClientRect
CheckMenuItem
DestroyMenu
SetMenu
InvalidateRect
MoveWindow
DialogBoxParamA
EndDialog
GetSubMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindow
GetWindowRect
SetWindowPos
GetKeyState
GetClipboardData
GetMenu
SetWindowLongA
GetDesktopWindow
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
SetFocus
SetDlgItemTextA
GetCapture

gdi32

CreatePalette
SetTextAlign
SetDIBitsToDevice
GdiFlush
StretchDIBits
DeleteObject
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
EnumFontFamiliesA
LineTo
MoveToEx
SetBkColor
GetBkColor
SetBkMode
GetBkMode
ExtTextOutA
GetTextExtentPoint32A
CreatePen
Rectangle
GetStockObject
CreateSolidBrush
SetTextColor
GetTextMetricsA
CreateFontIndirectA
RealizePalette
SelectPalette
GetClipBox
SaveDC
SelectObject
RestoreDC
GetSystemPaletteEntries
IntersectClipRect

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegCloseKey
RegQueryValueExA

shell32

DragAcceptFiles
DragQueryFileA

winmm

waveOutPrepareHeader
waveOutUnprepareHeader
timeKillEvent
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutReset
timeSetEvent
waveOutOpen
waveOutGetDevCapsA
waveOutClose

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.�rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75c3811b239a6c75e270610d830e276d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

winmm

Sections

.text Size: 204KB - Virtual size: 203KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 4KB - Virtual size: 10KB

.data1 Size: 4KB - Virtual size: 176B

.rsrc Size: 32KB - Virtual size: 30KB

.�rdata Size: 76KB - Virtual size: 76KB

.text
Size: 204KB - Virtual size: 203KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 4KB - Virtual size: 10KB

.data1
Size: 4KB - Virtual size: 176B

.rsrc
Size: 32KB - Virtual size: 30KB

.�rdata
Size: 76KB - Virtual size: 76KB