298f81c68081b079fe0dd88dc1075056_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

298f81c68081b079fe0dd88dc1075056_JaffaCakes118
Size

421KB
MD5

298f81c68081b079fe0dd88dc1075056
SHA1

231de1c45822fcc6776fb774a82b33146652deb7
SHA256

e15cf273d21227497708a7cadfe6643aa9ef3ae19579cda2bd381a682f2880d1
SHA512

f4c0cf3cdaccf2524dabebd56e58c9848d965f25d6f8e25c0aac9fd6a45d289a4048878ea7e35bb766e061eb68c8a13ad40fe771c9b8e57738cf251e14487776
SSDEEP

12288:sQFFlL+/BKvtxG6zyunOJuivZ7iUXmOVjGjb:s2lLOitx5BqU3UAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298f81c68081b079fe0dd88dc1075056_JaffaCakes118

Files

298f81c68081b079fe0dd88dc1075056_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4c8fa503edd2dd937924ac2d76afca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetCPInfo
RtlUnwind
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
GetProcAddress
GetACP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
FlushFileBuffers
SetStdHandle
VirtualProtect
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualAllocEx
lstrcpynW
GlobalSize
GetSystemInfo
TlsSetValue
lstrcmpW
HeapCreate
CloseHandle
LCMapStringA
FindClose
InterlockedExchange
CompareStringA
GetCurrentProcess
GetUserDefaultLCID
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetLastError
SetFilePointer
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameA

user32

SetCaretPos
ToAscii
DragDetect
GetDlgItemTextW
CreateMenu
LoadStringW
CheckMenuItem
SetCursor
GetDlgCtrlID
GetSysColor
SetClipboardData
LoadBitmapW
FrameRect
GetScrollRange

gdi32

StartDocW
GetROP2
SetBkMode
CreateCompatibleBitmap
RemoveFontResourceW
SetTextAlign
Rectangle
SetBkColor
PatBlt
SelectObject
DeleteDC
MoveToEx
CreateHatchBrush
CreatePen
GetTextExtentPointW
RestoreDC
GetPixel
GetTextMetricsW
CreatePatternBrush
EnumFontFamiliesExW
GetTextExtentPoint32W
GetDeviceCaps
SaveDC
ExtTextOutW
GetStockObject
OffsetWindowOrgEx
CreateSolidBrush
SetBrushOrgEx
EndPage

comdlg32

PrintDlgW
FindTextW
PrintDlgA
GetFileTitleW
FindTextA
ChooseColorW
GetOpenFileNameW
ChooseFontW
GetOpenFileNameA
ChooseFontA
GetSaveFileNameW
ChooseColorA
GetFileTitleA
ReplaceTextA
GetSaveFileNameA
ReplaceTextW
PageSetupDlgA

advapi32

RegEnumKeyExW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExA
RegCreateKeyW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
RegCloseKey

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4c8fa503edd2dd937924ac2d76afca7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 384KB - Virtual size: 595KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 384KB - Virtual size: 595KB

.rsrc
Size: 4KB - Virtual size: 4KB