f67b7589640a22fc6ab264b2ea1129f5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f67b7589640a22fc6ab264b2ea1129f5_JaffaCakes118
Size

95KB
MD5

f67b7589640a22fc6ab264b2ea1129f5
SHA1

c1ea10780f5eb2804996f80f3f7e9aa5780fd83f
SHA256

67e47090c98d272116439cfb8046f33fe6e8cc4add6a687c5f26925607b2f861
SHA512

72e32e0d63083e702927accad359ed1eea698b8f632dd13647b9e50753c6476270b4ed12080edaa48dfaa17ec54641f712b7f7aeae903cb6c2130bac4ddb42ea
SSDEEP

1536:NXrIsNu5nfuegiAR0lqVBLcskgQ8rJyUvn8rP5zek9O:5u5nlgLYqVBHNyUv8j5N9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f67b7589640a22fc6ab264b2ea1129f5_JaffaCakes118

Files

f67b7589640a22fc6ab264b2ea1129f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
VirtualAllocEx
GetLocalTime
GetCurrentThreadId
FreeResource
FreeLibrary
LockResource
SetErrorMode
HeapDestroy
GetDiskFreeSpaceA
SetLastError
MulDiv
GetSystemDefaultLangID
lstrlenW
HeapFree
DeleteCriticalSection
WriteFile
RaiseException
ExitThread
VirtualQuery
GetLocaleInfoA
GetCurrentThread
EnterCriticalSection
GetStringTypeA
CompareStringA
WideCharToMultiByte
SetFilePointer
ExitProcess
GetCurrentProcess
GetEnvironmentStrings
GetFileAttributesA
SizeofResource
lstrcmpA
GetProcAddress
GetDateFormatA
IsBadReadPtr
FindFirstFileA
DeleteFileA
GetProcessHeap
GetACP
lstrcmpiA
VirtualAlloc
Sleep
LoadLibraryA
LocalFree
CloseHandle
MoveFileA
GetFileType
GetCommandLineW
GetModuleFileNameA
LocalAlloc
GetVersion
IsBadHugeReadPtr

comctl32

ImageList_Create
ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Write
ImageList_DrawEx

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyA

user32

GetSysColorBrush
EnumWindows
EnumChildWindows
EnumThreadWindows
EqualRect
IsMenu
IsWindowUnicode
GetTopWindow
GetMenu

Exports

Exports

C5qSGKpfTdU5
sDuYdoPMPjjB
_QqlHS35B02
0xb0Tx41AKF
_ZF_wRE@20
aLk_L8_GD6
_NBjQaLhwzI9
_nYszemP@16
__R2ziurxzA
4BMsc_N7i
_iwoS9ov
_eIWNcR_mDoZa@24
8dFYC0a4Ir@20
SHqA55koqKdxZG@4
lXCjjKJk@12
_ddb1zvQZ_cd
_Ti4vPwrxwQkJ
WZXRQ5vEf@4
_Nc8bnoPxE@12
q19DVv9@8
dyR2hgPu_e
_rKBor5EC1lE81N
kKnJA9CxBlRCez@12
_p6otO@12
xjwajE5@4
_eF5lzWpaPq@8
_BchRkFe_y
_ANK_smmfDmuV
_IheDaI4MFgMz6
PwTwbT_s67ucgd
p4BSuSF2S8@20
_nbrNeIq1@8
_uDW4MOF_@16
oGYHT9fJ
_pA514@4
_qwv_Ct@8
_7N2OutJOARQ7D
_nWoEj4pGwxJD@20
_muUis
SC8x5HWwd
G4dJwWtp9ViA@4
JmrSht2
_sOkGOe6jJ@8
_TL3W1@4
WSAEIrj7@4
_yaIjVkH9BJ
wUx1Gu8
urSsHrkyOuPX
FJ_lY84NdLSxm0
_1A4A60RC
_4RN0HyTOZ
_lhniUvM
F3SxCUHomPO@12
_PVNEK6iWf9L@12
6BHpcfMkWIOj
_nPanqGvmsP1IE
ktbgpaRMu3@24
_CATF580
9jgjE_vx_W
_RrzLrQz@24
_Jf5Q0OlMbcifj
rHrFAGtzH@16
_G2uuLSt6FTH2@8
_v6gontFSI@24
_3C1Zfq@4

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 10KB - Virtual size: 9KB

.kudata Size: 51KB - Virtual size: 50KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 10KB - Virtual size: 9KB

.kudata
Size: 51KB - Virtual size: 50KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB