JaffaCakes118_fc428f0921c5b28cd522a8bc19284cac

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_fc428f0921c5b28cd522a8bc19284cac
Size

257KB
MD5

fc428f0921c5b28cd522a8bc19284cac
SHA1

01982ae2133a7cc6e6efd1d2ce02904f7c6371d7
SHA256

2d731bfc995043f216574dbcefb69cf0c6c9faa9674131f144d06489f68ca601
SHA512

6c30dd8c2e30c2f0f455450a03c15ca74449a559b4e790dc3f26be59cb7a98f7c1e217eb9e596c0cb4cd2865896835f78f1986a3e558648ff5e8d4cf619a1c04
SSDEEP

6144:f6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:f6u6fDdnpRJopjmPFRDFrsoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fc428f0921c5b28cd522a8bc19284cac

Files

JaffaCakes118_fc428f0921c5b28cd522a8bc19284cac
.exe windows:4 windows x86 arch:x86

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
BeginUpdateResourceW
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
LoadMenuIndirectA
CharLowerW
mouse_event
GetMenuInfo
CharPrevW
GetClassInfoW
SetDlgItemInt
GetMenuItemRect
MessageBoxIndirectA
SetDlgItemTextA
DialogBoxIndirectParamA
WinHelpW
GetKeyboardType
IsChild
SetMenu
GetSysColor
CopyIcon
GetDlgItemInt
CreateDialogIndirectParamW
keybd_event
PeekMessageA
GetCapture
RegisterWindowMessageW

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateMetaFileW
GetEnhMetaFileA
SetWinMetaFileBits
AddFontResourceA
GdiGetBatchLimit
UpdateICMRegKeyA
RemoveFontResourceA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

AVIStreamWriteData
AVIFileOpenW
AVIStreamEndStreaming
AVIFileAddRef
AVIFileEndRecord
AVIBuildFilter
AVISaveW
EditStreamSetInfoA
AVIStreamOpenFromFile
AVIClearClipboard
EditStreamCopy
AVIStreamFindSample

Sections

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icode
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unIsec
Size: 112KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

.edata Size: 5KB - Virtual size: 5KB

.icode Size: 14KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 16KB

.l Size: 107KB - Virtual size: 149KB

.data Size: 7KB - Virtual size: 331KB

.unIsec Size: 112KB - Virtual size: 166KB

.rsrc Size: 7KB - Virtual size: 6KB

.edata
Size: 5KB - Virtual size: 5KB

.icode
Size: 14KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 16KB

.l
Size: 107KB - Virtual size: 149KB

.data
Size: 7KB - Virtual size: 331KB

.unIsec
Size: 112KB - Virtual size: 166KB

.rsrc
Size: 7KB - Virtual size: 6KB