f1da527a325b58f170b0c687a80a6ffc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f1da527a325b58f170b0c687a80a6ffc_JaffaCakes118
Size

657KB
MD5

f1da527a325b58f170b0c687a80a6ffc
SHA1

312a539804ee4e9ef9bcdfe3b99d89c550964c16
SHA256

be9c45f6f56dae0c7e303f6280d2b2e50e2940c4c1a047bdbd28a2717af4de3e
SHA512

9434ba4b60ce048a752b082989c15614d035efedbc8893e588ed14bd26107ff4f70367a6ecd942cca3b9e3cc77d67a87348f701d7f40c52a073437a6140bbac2
SSDEEP

12288:pu54GR5ifepbopp+8Elm3jfUCBzUl5dFFgK:p/GRcfeQrElm3jsCJUlnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1da527a325b58f170b0c687a80a6ffc_JaffaCakes118

Files

f1da527a325b58f170b0c687a80a6ffc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d922180fcf7ba0e359c73663bfedc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CharLowerA
OffsetRect
GetMenu
IsWindowUnicode
MapWindowPoints

comctl32

ImageList_DrawEx
ImageList_Add
ImageList_Read
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
ImageList_Create

msvcrt

wcschr
rand
memmove
time
_acmdln
tolower
wcstol
swprintf
clock
srand
sprintf

kernel32

ReadFile
GetUserDefaultLCID
GetFileSize
HeapAlloc
SetEvent
GetModuleHandleA
GetDateFormatA
HeapDestroy
GetOEMCP
FindResourceA
lstrlenA
VirtualAllocEx
GetCurrentProcessId
GlobalDeleteAtom
GetStringTypeA
GetThreadLocale
WideCharToMultiByte
VirtualQuery
GetCurrentThread
GetDiskFreeSpaceA
SetErrorMode
GetACP
GetTempPathA
GetLastError
LockResource
GetLocalTime
GetProcessHeap
RaiseException
GetProcAddress
GetCommandLineW
GetTickCount
IsBadHugeReadPtr
lstrcatA
WaitForSingleObject
HeapFree
MoveFileExA
lstrcpynA
VirtualAlloc
LoadLibraryA
ResetEvent
ExitProcess
lstrcmpA
lstrcpyA
VirtualFree
MoveFileA
FreeLibrary
EnterCriticalSection
SetHandleCount
Sleep
LocalReAlloc
IsBadReadPtr
FindClose
GetModuleFileNameA
CreateFileA

Exports

Exports

Eaq4hct17NjNj
_poDe63j@4
_P234Rc88fJosL
eJ6JReArxZz@8
QzualhApog8YX
_9bIOb16LOBa
_DdDacZpPUbz
1eN7qe6
xEqBXo6CLL6@8
_o5s3sJ
e1n3I_EAvF
_iZvwXX2k@16
_TboIjy6
qdnFtbBiI@12
SZrW57O
ZhfGlchKiw@12
SLRgi3y@20
_J7Ij8yN6EI903m@4
_JEgtS@4
mcIUzJeev8
TlwtFMRCl
J9hjeSTadat_D@20
HBtlDPeBc
EfDUMjA
MtiCwbEB@4
_nmUWUs2FpFlUAu
r9_7A_YQncnk
aZ2TfOVIBHdiW@16
_G6uqPl4S2AP2@8
_SxbSzKvLNXj
iiSRUXXkliK
6CJ67zW8q
ELahhGKsU2qGdl
3Dc3I5aY
_L8rqN15U2qjJp
_pnh8LpTsJ1cY6a@4
_b0_feZy1H
b1IHpP
_d6WmWPpnO2Z@12
_UDgAm1att
t3flXd8wqLSYh@4
R87UCz
VJieL9g
_cChCY@12
_PH2Q9_@4
_SAMed@12
_05JQk7@4
_PtU3oD33VSztKo@24
_w30PZfOv
_gA3vIAwe_8
_kkpbSE9DqDl@24
_JMneHolOp
cZkuiECngm
HGiP5mMOll
PTy_6soE5
evmSfQZ2LaB
_7zRcuZP6rUEHJ@16
cxSVT
_3fCi47jUCEef9
NJ18Pp@4
CNF0ArTQ
_aQmM3e2FSUkrq
LRLkCbo@8
_irS9b9vH4G
_fnD_FK
1znTc58oFWKA8@4

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d922180fcf7ba0e359c73663bfedc0d

Headers

File Characteristics

Imports

user32

comctl32

msvcrt

kernel32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 846KB

.kldata Size: 194KB - Virtual size: 193KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 435KB - Virtual size: 436KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 846KB

.kldata
Size: 194KB - Virtual size: 193KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 435KB - Virtual size: 436KB