fd1ecc48bf5b293910811f4330c1cd9b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fd1ecc48bf5b293910811f4330c1cd9b_JaffaCakes118
Size

588KB
MD5

fd1ecc48bf5b293910811f4330c1cd9b
SHA1

674484afecf9aaa5a73ec415d98eec02a8a6a66f
SHA256

a81cb83b2d9f4833b63bc5c4cc13b1a659f4ac90049ccfe142aa360c12741407
SHA512

84738d83950e426a9d54067f2c72fb2d92945b1af7641bcbcee23c326936ba9cdd6566f3323d45d7c11a452f3b72fcf96dbc52f5f8e8cb1b39cb6301a31db314
SSDEEP

12288:TMzrrbtsso6bb1sjtE0+nIRMjh3yWtkopdZuaLH3agNtxmgwX3Rj:T8rrbJbKjtE02z8XowgNSg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1ecc48bf5b293910811f4330c1cd9b_JaffaCakes118

Files

fd1ecc48bf5b293910811f4330c1cd9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

241771f95cc99ea5951a1f85defbd270

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\F

Imports

kernel32

GetEnvironmentStrings
GetModuleFileNameA
GetLocaleInfoA
VirtualAllocEx
FreeLibrary
ReadFileEx
CreateFileA
PulseEvent
LCMapStringA
InterlockedIncrement
HeapAlloc
GetLocaleInfoW
GetComputerNameA
GetUserDefaultLCID
RtlUnwind
SetFilePointer
lstrcmp
IsValidCodePage
SetHandleCount
GetDateFormatA
GetStartupInfoA
ReadConsoleOutputA
UnhandledExceptionFilter
GetTimeFormatA
ReadConsoleA
GetFileTime
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetLastError
VirtualFree
TlsGetValue
GetSystemTimeAsFileTime
CompareStringA
CreateEventW
GlobalUnfix
GetLocalTime
CreateMutexA
GetTimeZoneInformation
SetCurrentDirectoryA
GetCurrentProcessId
GetStdHandle
GetCurrentProcess
TerminateProcess
FreeEnvironmentStringsA
DeleteCriticalSection
IsDebuggerPresent
GetCommandLineA
GetACP
LCMapStringW
ConvertDefaultLocale
ExitProcess
SetConsoleCursorPosition
GetFileType
GetConsoleOutputCP
ReadFile
SetConsoleCursorInfo
GetStringTypeExW
GetDiskFreeSpaceExA
ReadConsoleOutputW
HeapSize
OpenMutexA
FlushFileBuffers
lstrcpyn
GetTickCount
TlsAlloc
WriteConsoleW
GetModuleHandleA
FileTimeToLocalFileTime
VirtualAlloc
LocalHandle
GetCurrentThreadId
GetOEMCP
Sleep
GetCurrentThread
lstrcpynA
CreateRemoteThread
EnterCriticalSection
GetStringTypeW
VirtualQuery
UnlockFileEx
SetSystemTime
GetNamedPipeHandleStateW
OpenSemaphoreA
IsValidLocale
WaitNamedPipeA
WriteFile
GetConsoleMode
HeapReAlloc
GetStartupInfoW
lstrcmpiA
GetSystemDefaultLCID
GetStringTypeA
TlsSetValue
InterlockedDecrement
GetConsoleCP
WriteFileEx
VirtualQueryEx
FindAtomW
ExitThread
SetConsoleCtrlHandler
GetCPInfo
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
CommConfigDialogW
WideCharToMultiByte
LoadLibraryA
CompareStringW
FindResourceA
EnumSystemLocalesA
SetEnvironmentVariableA
GetLastError
GetFileSize
GetModuleHandleW
InterlockedExchange
QueryPerformanceCounter
lstrlenA
HeapDestroy
GlobalFree
WriteConsoleA
LeaveCriticalSection
GetProcAddress
GetNamedPipeHandleStateA
lstrcpynW
MultiByteToWideChar
WriteProfileSectionW
SetStdHandle
TlsFree
GetProcessHeap
CloseHandle
EnumTimeFormatsA
WritePrivateProfileStringA
lstrcatW
WriteProfileSectionA
HeapFree

user32

SetMenuItemBitmaps
DialogBoxIndirectParamW
EnumThreadWindows
SetWindowsHookA
SetActiveWindow
DefWindowProcA
ChangeDisplaySettingsA
WinHelpW
GetClassInfoExW
DrawTextA
LoadCursorFromFileW
ScreenToClient
CharToOemA
LoadCursorFromFileA
SystemParametersInfoA
SetKeyboardState
ReplyMessage
GetClientRect
GetWindowPlacement
RealChildWindowFromPoint
DestroyWindow
ActivateKeyboardLayout
EnumWindows
SendInput
RegisterClassExA
LoadKeyboardLayoutA
ShowWindow
DrawFrameControl
UnregisterDeviceNotification
IsDialogMessage
VkKeyScanA
CreateWindowExW
DdeDisconnectList
GetWindowWord
RegisterClassA
GetWindowTextLengthW
GetWindowLongA
LoadImageA
WINNLSGetIMEHotkey
SetPropW
GetClassInfoExA
SwitchDesktop
PeekMessageW
DestroyCursor
AnyPopup
ExcludeUpdateRgn
EndDialog
MessageBoxA
ToAscii
LookupIconIdFromDirectory
FlashWindow
SetPropA
RegisterClassExW
GetScrollInfo
OpenInputDesktop
IsClipboardFormatAvailable
SetRect
EnumDisplayMonitors
DlgDirListComboBoxA
GetWindowThreadProcessId
GetClassNameA
GetUserObjectInformationA

gdi32

SelectClipPath
FixBrushOrgEx
CloseFigure
DeleteObject
DeleteDC
GetPolyFillMode
GetCharABCWidthsW
CreateDCW
Escape
GetMetaFileBitsEx
RemoveFontResourceW
SetBkMode
SwapBuffers
CreateEnhMetaFileA
UnrealizeObject
GetDeviceCaps
RoundRect
PaintRgn
SetMetaFileBitsEx
GetObjectA
GetDIBColorTable
TextOutW
SelectObject
GetTextExtentExPointW

comctl32

ImageList_GetImageRect
ImageList_SetDragCursorImage
CreatePropertySheetPageW
ImageList_SetFlags
_TrackMouseEvent
InitCommonControlsEx
ImageList_Remove
DrawStatusTextW
ImageList_LoadImage
ImageList_DrawEx
InitMUILanguage

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

241771f95cc99ea5951a1f85defbd270

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 248KB - Virtual size: 245KB

.data Size: 120KB - Virtual size: 136KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 248KB - Virtual size: 245KB

.data
Size: 120KB - Virtual size: 136KB

.rsrc
Size: 20KB - Virtual size: 16KB