42a44a7e39e69eb49093b3e2ed85fba1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42a44a7e39e69eb49093b3e2ed85fba1_JaffaCakes118
Size

22KB
MD5

42a44a7e39e69eb49093b3e2ed85fba1
SHA1

979cc9c10f7c07841ebb226268883b722545f296
SHA256

db995a459401b7a86b871ed6d9d9cc78e45f95c21f90147eef27e7782d2b11e9
SHA512

c1671721430abc0b92d6a7f621795c237d611f78fdce2af5fdbef6a4daf1bb63d4c640a2b22ea9b61829ee54f78f54e3bbba76a3ac58c4d5baa1789bc7b523cb
SSDEEP

384:oqs9UcuHGf2yi9+0jd39LYqsEhnZeZkoua5yy1jHAp8lxtNXM2oq59:Z1cuHMiljTLFhnZeZsa5yyEOFNzv59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a44a7e39e69eb49093b3e2ed85fba1_JaffaCakes118

Files

42a44a7e39e69eb49093b3e2ed85fba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c90412bf8a041d9500eccced42658f93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
CreateDirectoryA
GetWindowsDirectoryA
FindClose
FindFirstFileA
RemoveDirectoryA
GetTempPathA
GetShortPathNameA
GetModuleFileNameA
WideCharToMultiByte
lstrlenW
lstrcmpiA
SetLastError
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
GetTickCount
TerminateProcess
WaitForSingleObject
lstrcatA
lstrcpyA
ResumeThread
SetPriorityClass
lstrlenA
GetCurrentThread
SetThreadPriority
CreateProcessA
GetTempFileNameA
MultiByteToWideChar
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetModuleHandleA
GetStartupInfoA
ExitProcess
DebugBreak
HeapReAlloc
HeapFree
LocalFree
GetLastError
FormatMessageA
OpenProcess
GetFileAttributesA
DeleteFileA
GetCurrentProcess

user32

GetWindowRect
GetWindow
SystemParametersInfoA
GetParent
GetSystemMetrics
CreateWindowExA
RegisterClassExA
GetWindowLongA
MapWindowPoints
GetClientRect
CallWindowProcA
DispatchMessageA
DestroyWindow
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
FindWindowA
PostMessageA
CharNextA
PeekMessageA
SetWindowLongA
SetWindowPos
LoadCursorA
GetClassInfoExA
IsWindow
SetWindowTextA
ShowWindow
MessageBoxA
PostQuitMessage
GetWindowThreadProcessId
SendMessageTimeoutA
CreateDialogParamA
UpdateWindow
DefWindowProcA
wsprintfA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegCloseKey

shell32

ShellExecuteA

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

setupapi

SetupGetStringFieldA
SetupFindFirstLineA
SetupFindNextLine
SetupOpenInfFileA
SetupSetDirectoryIdA
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupCloseFileQueue
SetupInitDefaultQueueCallbackEx

wininet

InternetGetConnectedState
InternetQueryOptionA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c90412bf8a041d9500eccced42658f93

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

setupapi

wininet

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 3KB