JaffaCakes118_6a19506126a489a8b4843fc3a3ffd000

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_6a19506126a489a8b4843fc3a3ffd000
Size

316KB
MD5

6a19506126a489a8b4843fc3a3ffd000
SHA1

0a520660ac485807fa5299184d9badc072b7f25f
SHA256

3a7f6106cbe35dcd0c7f25bb6c4b1fc9c19eb348cafba007121f03e74c6d73e2
SHA512

76b7624822be2c2e2dcdf1d3848faecc4d83117a94168818954da51521ce32ccfa00bf971c1c1281b2581755e4e3d8a4695ac9f86616b66d2c06bada89637a40
SSDEEP

6144:mx0wK2lCnRNsfglAVEldHASreqpuwhS9qHtyO38n+V1OdOFb4twrU:twK2UnPwgqEldprequwUkHIZUIEWtwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6a19506126a489a8b4843fc3a3ffd000

Files

JaffaCakes118_6a19506126a489a8b4843fc3a3ffd000
.exe windows:4 windows x86 arch:x86

afe679fe6774db10df74d7d98d61b191

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
LoadLibraryA
GetExpandedNameW
GetExpandedNameA
WinExec
lstrcmpi
CopyFileExW
AddAtomA
lstrcpyW
MulDiv
GetComputerNameA
DisconnectNamedPipe
GetTempPathA
lstrlenA
FatalAppExitW
OpenMutexA
SetCalendarInfoW
QueryPerformanceFrequency
GetWindowsDirectoryA
CopyFileExA
GlobalFindAtomA
lstrcpynW
Beep
SleepEx
SetLocaleInfoW
lstrcmpiW
BeginUpdateResourceW
SearchPathW
EnumCalendarInfoW
SystemTimeToFileTime
GetCurrentDirectoryA
CompareFileTime
lstrcatA
lstrcmpW
GlobalGetAtomNameA
OpenFile
GetHandleInformation
GetTimeFormatW
GetLogicalDrives
CreateEventW
RemoveDirectoryA
GetProcessHeaps
GetWindowsDirectoryW
GlobalFindAtomW
OpenMutexW
lstrcpy
DeleteAtom
lstrcpynA
OpenSemaphoreA
lstrcmpA
CreateMutexA
GetCurrentThreadId
CreateMailslotA
GetLogicalDriveStringsA
CreateMutexW
OpenWaitableTimerA
LoadResource
TlsAlloc

user32

LoadMenuIndirectW
EnumWindows
RemoveMenu
wsprintfW
GetClassInfoExW
MonitorFromRect
mouse_event
SendDlgItemMessageW
SetMenu
EnumClipboardFormats
IsDlgButtonChecked
SetForegroundWindow
CreateDesktopA
SetParent
LoadCursorW
MessageBoxIndirectW
LoadMenuW
GetMenuState
GetMessageW
GetWindowRgn
CopyIcon
RegisterClassExA
SetCapture
MessageBoxW
LoadBitmapA
RegisterWindowMessageA
GetActiveWindow
ActivateKeyboardLayout
CharLowerW
AppendMenuW
ShowWindow
CreateDialogParamA
UpdateLayeredWindow
GetSystemMetrics
WinHelpW
CreateAcceleratorTableW
SetCursor
CharUpperW
OffsetRect
CreateMenu
CharNextW
PeekMessageA
ShowCaret
CreatePopupMenu
SetWindowTextA
CreateDialogIndirectParamA
CharNextA
LoadImageA
LoadMenuA
PeekMessageW
OpenClipboard
EnableWindow
RegisterClassExW
LoadIconA
GetTopWindow
DestroyCursor
CreateDialogIndirectParamW
IsIconic
GetMenu
ShowCursor
MoveWindow
MessageBeep
CreateWindowExW
GetDlgItemTextA
GetSysColor
DialogBoxIndirectParamW
DefWindowProcA
LoadMenuIndirectA
SetActiveWindow
GetSubMenu
CopyRect
WaitForInputIdle
InsertMenuItemA
GetClassInfoW
GetMenuItemInfoW
IsChild
CharLowerA
GetMenuStringA
MonitorFromWindow
SetFocus
TrackPopupMenuEx
SetWindowRgn
InvalidateRect
SendMessageW
GetCapture
CheckMenuItem
LoadImageW
PostQuitMessage
SetDlgItemInt
EndDialog
GetMenuItemRect
LoadCursorA
IsWindow
GetClassInfoExA
GetKeyboardLayout
GetKeyboardType
AppendMenuA
wvsprintfA
CreateDesktopW
SetWindowLongW
InsertMenuA
GetDCEx
wsprintfA
DestroyMenu
GetCursorPos
GetClassInfoA
SetDlgItemTextW
SetWindowTextW
SetCursorPos
CharPrevA
UnregisterClassW
AdjustWindowRect
LoadIconW
GetMenuItemID
SetWindowPos
GetDesktopWindow
DialogBoxIndirectParamA
CreateAcceleratorTableA
GetMenuItemCount
CharUpperA
WinHelpA
CreateWindowExA
MessageBoxA
GetScrollPos
GetSysColorBrush
CharPrevW
RegisterWindowMessageW
LoadBitmapW
GetFocus
FindWindowW
UnregisterClassA
IsMenu
EndMenu
GetMenuInfo
SendDlgItemMessageA
DialogBoxParamW
GetIconInfo
EnableMenuItem
GetMessageA
RegisterClassA
DialogBoxParamA

gdi32

UpdateICMRegKeyW
SelectBrushLocal
UpdateICMRegKeyA
CreateFontA
CreateRectRgn
CreateDIBPatternBrush
RemoveFontResourceA
SetMetaFileBitsEx
TranslateCharsetInfo
CreateScalableFontResourceA
CreateFontIndirectW
CreateColorSpaceA
CreateColorSpaceW
CreateScalableFontResourceW
CreateDIBSection
GetEnhMetaFileA
GetMetaFileW
StretchDIBits
GetEnhMetaFileW
CreateFontIndirectA
RemoveFontResourceExW
CreateBrushIndirect
CreateFontW
CreateICA
ExtCreateRegion
CreateDIBPatternBrushPt
SetWinMetaFileBits
CreateBitmapIndirect
CreateFontIndirectExW
CreateICW
DeleteObject

cryptext

CryptExtOpenCTL
CryptExtOpenCRL
CryptExtOpenP7R
DllUnregisterServer
CryptExtAddCTL
CryptExtAddCERW
CryptExtOpenCATW
CryptExtAddP7RW
CryptExtAddP7R
CryptExtAddCRLW
CryptExtOpenCER
CryptExtAddCRL
DllGetClassObject
CryptExtAddPFX
CryptExtOpenPKCS7W

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 11.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afe679fe6774db10df74d7d98d61b191

Headers

File Characteristics

Imports

kernel32

user32

gdi32

cryptext

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 6KB - Virtual size: 290KB

.data Size: 275KB - Virtual size: 11.7MB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 6KB - Virtual size: 290KB

.data
Size: 275KB - Virtual size: 11.7MB

.rsrc
Size: 18KB - Virtual size: 17KB