30b7f916f5b5d31d86dcbb2e11fbc43a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

30b7f916f5b5d31d86dcbb2e11fbc43a_JaffaCakes118
Size

201KB
MD5

30b7f916f5b5d31d86dcbb2e11fbc43a
SHA1

e18c7afb985b42fc41a24861c2fe5b23d35bc947
SHA256

7cf206e2e7be0e57fb212fc65d2b0db4ba41c365541705649721a3062beeade1
SHA512

1e1fbebf4726ff09e38fc692597fa63e4a3632cd351e64a729f2fa4374ded10a910e76ffb5509f140ca83869392538c9d8894e0b2d3ba67c7cd93a8655c6f917
SSDEEP

3072:xCVm0P6z1xuxm57tuYcqivshBTUA6aoljm20/fm48ehy825atTBfX8/jBSME:oVmDKTvIemb/fn8CZEatTBk/1SME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b7f916f5b5d31d86dcbb2e11fbc43a_JaffaCakes118

Files

30b7f916f5b5d31d86dcbb2e11fbc43a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d551453118850719b417b558de9badc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetTempPathA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
DeleteFileA
OpenProcess
GetLongPathNameA
CreateToolhelp32Snapshot
Process32First
Process32Next
FindFirstFileA
FindNextFileA
FindClose
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeThread
Sleep
CloseHandle
CreateThread
SetEvent
WaitForMultipleObjects
WriteFile
CreateDirectoryA
GetVolumeInformationA
GetDriveTypeA
CreateProcessA
DuplicateHandle
GetCurrentProcess
CreatePipe
GetStartupInfoA
GetModuleHandleA
GetTickCount
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetExitCodeProcess
TerminateProcess
CreateEventA

gdi32

GetCharABCWidthsA
GetBkColor
GetTextFaceA
ExtSelectClipRgn
DeleteMetaFile
CopyEnhMetaFileA
SetDIBits

msvcrt

??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
pow
memset
memcmp
strlen
strchr
strrchr
sprintf
strcmp
_purecall
_CxxThrowException
strcpy
_ftol
_controlfp

ws2_32

WSAStartup
WSACleanup
gethostbyname
gethostname
closesocket
WSAIoctl
socket
bind
htons
sendto
ntohs
WSAGetLastError
recvfrom
getsockname
shutdown
connect
recv
send

psapi

GetModuleFileNameExA
EnumProcessModules

user32

GetWindowLongA
GetWindowTextA
PostThreadMessageA
FindWindowA
PostMessageA
GetDesktopWindow
GetWindow
GetWindowThreadProcessId
GetMessageA

shell32

ShellExecuteA
SHFileOperationA

ole32

CoCreateGuid
CoUninitialize
CoInitialize

winmm

timeKillEvent
timeSetEvent

Sections

.text
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d551453118850719b417b558de9badc6

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

ws2_32

psapi

user32

shell32

ole32

winmm

Sections

.text Size: 152KB - Virtual size: 148KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 592B

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 152KB - Virtual size: 148KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 592B

.rsrc
Size: 12KB - Virtual size: 10KB