0cbdeee83d029807f61b93ab83317e83_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cbdeee83d029807f61b93ab83317e83_JaffaCakes118
Size

2.0MB
MD5

0cbdeee83d029807f61b93ab83317e83
SHA1

05bfc839b65d13d027fd3b5379e6379a9d08705a
SHA256

309d396b1cf39b68e7a18f8a68a92324a3d5304ad77e3a27f9d8bd9101d0ebba
SHA512

a2a29f4705502ccaa37848c1b22c69d747e3b253005a51cdb2902eae1588c2d0490f96232e5713c1dc6db08433b1bb09a90258a0cdbf324118ff4a6b027df04b
SSDEEP

49152:C3m8L+XfCHFrmFutPW9eJp6B7m9A9Fx9ny53V/MpMco:C28L4CHFrmFutPvpQ7EoFxyIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbdeee83d029807f61b93ab83317e83_JaffaCakes118

Files

0cbdeee83d029807f61b93ab83317e83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

350d0040c35918dd2247358b59955f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
GetCommState
SetSystemTime
FindNextChangeNotification
GetProcessHeap
GlobalDeleteAtom
PeekNamedPipe
GetStringTypeExW
GetTickCount
GlobalAddAtomA
TryEnterCriticalSection
FindFirstFileW
SwitchToFiber
GetOverlappedResult
GlobalAddAtomW
SetCurrentDirectoryA
SetEndOfFile
RemoveDirectoryW
GetHandleInformation
SetThreadLocale
CompareStringW
SetCommMask
GetDiskFreeSpaceW
EnumResourceLanguagesW
GetLogicalDriveStringsA
FileTimeToLocalFileTime
FindFirstFileExW
lstrcmpiW
ScrollConsoleScreenBufferA
GetCommandLineW
PurgeComm
GetPrivateProfileSectionW
SetCommTimeouts
ExitProcess
SetErrorMode
MoveFileExA
IsDBCSLeadByteEx
LocalReAlloc

advapi32

GetSecurityDescriptorDacl
GetCurrentHwProfileW
BuildTrusteeWithSidW
CloseServiceHandle
RegSetValueW
IsTextUnicode
CryptReleaseContext
AllocateAndInitializeSid
RegQueryValueExA
CryptImportKey
RegCreateKeyW
CryptGenRandom
AbortSystemShutdownW
SetServiceStatus
GetSidSubAuthorityCount
RegUnLoadKeyW

ole32

CoFreeAllLibraries
CoImpersonateClient
StgSetTimes
CoUninitialize

version

GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA

user32

GetClipCursor
SetKeyboardState
GetMenuItemID
CharUpperA
wsprintfW
SetSysColors
LoadImageW
IsRectEmpty
AppendMenuW
GetKeyboardLayoutNameW
IsCharUpperA
RegisterDeviceNotificationW
ValidateRect
GetKeyboardState
GetWindow
TabbedTextOutW
SetClipboardViewer

msvcrt

_wmakepath
_mbsdec
strstr
time
rename
_popen
puts
bsearch
iswdigit
wcstok
fwprintf
_mbctoupper
_putenv
iswctype
swprintf
ftell
_finite
_sleep
_wspawnvp

Sections

.text
Size: 5KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

350d0040c35918dd2247358b59955f33

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

version

user32

msvcrt

Sections

.text Size: 5KB - Virtual size: 221KB

.text Size: 512B - Virtual size: 18B

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 5KB - Virtual size: 221KB

.text
Size: 512B - Virtual size: 18B

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB