JaffaCakes118_c16306fd51b5cf194802e5cbb710f6b0

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_c16306fd51b5cf194802e5cbb710f6b0
Size

257KB
MD5

c16306fd51b5cf194802e5cbb710f6b0
SHA1

93287879065acff53e0f475094c12d0962b4a5b8
SHA256

1f59d24092bdac6e7d494dc04deb3dc6feb8718d2a0344281c0cdd1b0ec3766a
SHA512

9f4e69e21ff6f57827a36b098efc2aaf0374391a1250cf668a4ab71952697e87b736f96f84907bcd8a7bfb5fa9d2414388490f6764831e4e980ff5b86f16c280
SSDEEP

6144:t6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:t6u6fDdnpRJopjmPFRDFrsoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c16306fd51b5cf194802e5cbb710f6b0

Files

JaffaCakes118_c16306fd51b5cf194802e5cbb710f6b0
.exe windows:4 windows x86 arch:x86

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
BeginUpdateResourceW
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
LoadMenuIndirectA
CharLowerW
mouse_event
GetMenuInfo
CharPrevW
GetClassInfoW
SetDlgItemInt
GetMenuItemRect
MessageBoxIndirectA
SetDlgItemTextA
DialogBoxIndirectParamA
WinHelpW
GetKeyboardType
IsChild
SetMenu
GetSysColor
CopyIcon
GetDlgItemInt
CreateDialogIndirectParamW
keybd_event
PeekMessageA
GetCapture
RegisterWindowMessageW

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateMetaFileW
GetEnhMetaFileA
SetWinMetaFileBits
AddFontResourceA
GdiGetBatchLimit
UpdateICMRegKeyA
RemoveFontResourceA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

AVIStreamWriteData
AVIFileOpenW
AVIStreamEndStreaming
AVIFileAddRef
AVIFileEndRecord
AVIBuildFilter
AVISaveW
EditStreamSetInfoA
AVIStreamOpenFromFile
AVIClearClipboard
EditStreamCopy
AVIStreamFindSample

Sections

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icode
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unIsec
Size: 112KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

.edata Size: 5KB - Virtual size: 5KB

.icode Size: 14KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 16KB

.l Size: 107KB - Virtual size: 149KB

.data Size: 7KB - Virtual size: 331KB

.unIsec Size: 112KB - Virtual size: 166KB

.rsrc Size: 7KB - Virtual size: 6KB

.edata
Size: 5KB - Virtual size: 5KB

.icode
Size: 14KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 16KB

.l
Size: 107KB - Virtual size: 149KB

.data
Size: 7KB - Virtual size: 331KB

.unIsec
Size: 112KB - Virtual size: 166KB

.rsrc
Size: 7KB - Virtual size: 6KB