fe466dcac88788f97b9c08bc0f08047e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe466dcac88788f97b9c08bc0f08047e_JaffaCakes118
Size

85KB
MD5

fe466dcac88788f97b9c08bc0f08047e
SHA1

36ccbbafd0e360161c28dd7221b9fc37eecf74a6
SHA256

c45558d0ecd68af36ce1fb3e28ca84a8040d1e5175d6f8a58e4da4c9ce661d6d
SHA512

489433a68b2e9a319103fdfe8808551015daf7343258d85a8a7d9273ab625d7ee242aedadea40a0f762b8c0ceb45c581fbd06d894a8dbea160013229c6530f5d
SSDEEP

1536:4LyCDd5ZYnG1pwEam6feJQPSqLGKCiq+oZ3br324qJ0lR0iY:Fmd5ywwEamPJhHKCi9o1br32L0BY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe466dcac88788f97b9c08bc0f08047e_JaffaCakes118

Files

fe466dcac88788f97b9c08bc0f08047e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43a2054ea0df8585ab2c546231fbe499

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msasn1

ASN1BEREncUTCTime
ASN1BEREncEndOfContents
ASN1ztchar16string_free
ASN1utctime_cmp
ASN1BERDecPeekTag
ASN1DecSetError
ASN1BERDecBitString
ASN1generalizedtime_cmp
ASN1char16string_cmp
ASN1_CreateEncoder
ASN1charstring_free
ASN1BERDecSkip
ASN1BERDecUTCTime
ASN1BEREncChar16String
ASN1char32string_cmp
ASN1BERDecChar16String
ASN1CEREncFlushBlkElement
ASN1ztchar32string_free
ASN1_CreateDecoderEx

msvfw32

DrawDibBegin
GetSaveFileNamePreviewW
ICGetInfo
GetOpenFileNamePreviewW
GetOpenFileNamePreview
DrawDibStop
VideoForWindowsVersion
ICDraw
ICSeqCompressFrame
ICOpen
ICOpenFunction
DrawDibStart
GetSaveFileNamePreviewA
ICImageDecompress
MCIWndCreateW
DrawDibProfileDisplay
MCIWndRegisterClass
DrawDibClose
ICSeqCompressFrameEnd

resutils

ResUtilIsPathValid
ResUtilSetUnknownProperties
ResUtilDupParameterBlock
ResUtilGetResourceName
ResUtilResourcesEqual
ResUtilPropertyListFromParameterBlock
ResUtilGetResourceNameDependency
ClusWorkerTerminate
ResUtilGetResourceDependency
ResUtilFindExpandSzProperty
ResUtilGetEnvironmentWithNetName
ResUtilFreeEnvironment
ResUtilEnumResourcesEx
ResUtilGetPropertiesToParameterBlock
ResUtilIsResourceClassEqual
ResUtilSetMultiSzValue
ResUtilResourceTypesEqual
ResUtilGetResourceDependencyByClass
ResUtilGetBinaryValue
ResUtilDupString

kernel32

ReadConsoleInputExW
CreateSemaphoreW
SetFileValidData
GetLastError
GetCurrentProcessId
GetBinaryType
EnumSystemLanguageGroupsW
LoadLibraryA
QueryPerformanceCounter
CallNamedPipeW
GetStartupInfoA
VerLanguageNameA
HeapCreate
GetCompressedFileSizeA
GetTickCount
EnterCriticalSection
GetCurrentThreadId
SetUserGeoID
GetConsoleHardwareState
EnumSystemCodePagesA
GetProcessAffinityMask
FreeUserPhysicalPages
VirtualAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
QueryDepthSList

msvcrt40

??1ifstream@@UAE@XZ
fwrite
?delbuf@ios@@QAEXH@Z
_winver
_y0
_mbsninc
clock
?attach@ofstream@@QAEXH@Z
_purecall
??_Dstdiostream@@QAEXXZ
wcschr
?open@fstream@@QAEXPBDHH@Z

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43a2054ea0df8585ab2c546231fbe499

Headers

DLL Characteristics

File Characteristics

Imports

msasn1

msvfw32

resutils

kernel32

msvcrt40

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 23KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 304B

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 23KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 304B