01eed8bfb6c6ae0bf83678c262d1a48e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01eed8bfb6c6ae0bf83678c262d1a48e_JaffaCakes118
Size

284KB
MD5

01eed8bfb6c6ae0bf83678c262d1a48e
SHA1

255c9e717898d7777de7768f7a0b587f8374726f
SHA256

9dfd6369baeb7127f501341ce7731e63a157cecc605589607a0b5d29c8400db7
SHA512

5a43e816f465b121ed55f4066aed92e2d2d685dab4739013f1060eb595d8f0d50ccbabce496b15631cf3bc5a2da64663519cd47e414ec7377194b14251ed7ec7
SSDEEP

3072:XpH8HqwZw3NfqA0GwtkeAmszuMvPOI8Nya83TYf:XpHJwZwBqA0kef6upNy33c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01eed8bfb6c6ae0bf83678c262d1a48e_JaffaCakes118

Files

01eed8bfb6c6ae0bf83678c262d1a48e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3d47d53a7276257e174fbcf6caa958b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
DuplicateHandle
GetEnvironmentStringsW
SearchPathA
GetProcAddress
FlushFileBuffers
SetLastError
CreateMailslotA

user32

CheckDlgButton
CreateDialogParamA
CharLowerW
CopyImage
GetMenuItemInfoW
CharUpperA
GetActiveWindow
SetDlgItemTextW
DeleteMenu
ClientToScreen
UpdateLayeredWindow
DefWindowProcW
InsertMenuItemW
InvalidateRgn
LoadBitmapW
CharPrevA
MonitorFromWindow
GetDC
OffsetRect
GetDlgItem
RegisterWindowMessageW
BringWindowToTop
CheckMenuRadioItem
CheckMenuItem
DrawTextA
RegisterClassA
CharUpperW
CreateWindowExW
LoadIconA
AnimateWindow
IsIconic
EnumDesktopWindows
SetWindowPos
CharNextW
EnumClipboardFormats
CharLowerA
CreateCaret
DialogBoxParamW
SetMenu
SetCapture
CopyIcon
GetCursorPos
GetWindowLongW
ArrangeIconicWindows
MessageBoxW
IsDlgButtonChecked
UpdateWindow
CharNextA
IsMenu
DefFrameProcA

gdi32

GetGraphicsMode
GetEnhMetaFilePaletteEntries
PolyDraw
GetEnhMetaFileBits
Pie
GetKerningPairsA
GetMetaFileW
ArcTo
GetMetaFileBitsEx
GetCharABCWidthsA

advapi32

RegCreateKeyExA
RegQueryValueW
RegEnumValueA
RegOpenKeyExW
RegDeleteValueW
RegReplaceKeyA
RegReplaceKeyW

shell32

ExtractIconExA
SHGetDesktopFolder
StrRStrIW
SHCreateDirectoryExA
StrCmpNIW
SHGetDataFromIDListA
StrRStrIA
StrCmpNW

opengl32

glLightiv
glColor3sv
glMultMatrixf
wglUseFontOutlinesA
glPopAttrib
glTexCoord2sv
GlmfBeginGlsBlock
glScalef
glColor4i

ws2_32

recvfrom
inet_ntoa
WSADuplicateSocketA
getservbyport
getservbyname

winspool.drv

DeletePrinter
OpenPrinterA

wsock32

GetAddressByNameW
ntohl
SetServiceW
getservbyname
socket
GetNameByTypeW
WSAAsyncGetServByPort
AcceptEx
select
WSAAsyncGetServByName
WSAStartup

crypt32

CertFindSubjectInSortedCTL
CertFindChainInStore
CryptGetAsyncParam
CertSerializeCRLStoreElement
I_CryptSetTls
CryptEncodeObject
CryptMsgDuplicate
RegSetValueExU
CryptFreeOIDFunctionAddress
CertDeleteCRLFromStore
I_CryptReleaseLruEntry
CryptSIPRetrieveSubjectGuid
CryptHashToBeSigned
CryptHashMessage
CertDuplicateCertificateContext

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.URMkF
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zJXOMC
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xGw
Size: 2KB - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Q
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pu
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FU
Size: 1024B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPSD
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.agwcuf
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yhy
Size: 1KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3d47d53a7276257e174fbcf6caa958b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

opengl32

ws2_32

winspool.drv

wsock32

crypt32

Sections

.text Size: 13KB - Virtual size: 12KB

.URMkF Size: 512B - Virtual size: 4KB

.zJXOMC Size: 1024B - Virtual size: 21KB

.xGw Size: 2KB - Virtual size: 572B

.Q Size: 4KB - Virtual size: 19KB

.Pu Size: 1KB - Virtual size: 16KB

.FU Size: 1024B - Virtual size: 35KB

.UPSD Size: 2KB - Virtual size: 38KB

.agwcuf Size: 1024B - Virtual size: 24KB

.data Size: 16KB - Virtual size: 16KB

.lj Size: 1KB - Virtual size: 4KB

.yhy Size: 1KB - Virtual size: 255KB

.rsrc Size: 229KB - Virtual size: 229KB

.text
Size: 13KB - Virtual size: 12KB

.URMkF
Size: 512B - Virtual size: 4KB

.zJXOMC
Size: 1024B - Virtual size: 21KB

.xGw
Size: 2KB - Virtual size: 572B

.Q
Size: 4KB - Virtual size: 19KB

.Pu
Size: 1KB - Virtual size: 16KB

.FU
Size: 1024B - Virtual size: 35KB

.UPSD
Size: 2KB - Virtual size: 38KB

.agwcuf
Size: 1024B - Virtual size: 24KB

.data
Size: 16KB - Virtual size: 16KB

.lj
Size: 1KB - Virtual size: 4KB

.yhy
Size: 1KB - Virtual size: 255KB

.rsrc
Size: 229KB - Virtual size: 229KB