17aab2416bc2c524ea3ef0987c59a2e3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

17aab2416bc2c524ea3ef0987c59a2e3_JaffaCakes118
Size

56KB
MD5

17aab2416bc2c524ea3ef0987c59a2e3
SHA1

4a38cfb88a608db400132c38267accb7b2c433a4
SHA256

1b0e694d5ca91c1ee359729e8a901e204d1418516c4659958a3db42645555770
SHA512

de769cafafa2d17ba3160daef9744a36b773609680ba1f6fffbcdb822eb6e7a7220bfdb902077da6f8676a611d892e445418bd8ecb899c0c4829c4665c56b9f6
SSDEEP

768:iYWd9M3W1C03VqjSRz80nk+0wXtMajyN6f6:iYo8CC+Vsaz80nk+0w6ajyN6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17aab2416bc2c524ea3ef0987c59a2e3_JaffaCakes118

Files

17aab2416bc2c524ea3ef0987c59a2e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d688fcb20f2bd10cd7d8e3fae06c2e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetCommandLineW
InterlockedDecrement
GetLastError
LocalFree
CompareStringA
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetLastError
InterlockedIncrement
FreeLibrary
ExitProcess

user32

SetForegroundWindow
MessageBoxA

fineobj

??0CUnicodeString@FObj@@QAE@XZ
?GetFineObjectsVersion@FObj@@YAHXZ
?ThrowCOMException@FObj@@YAXJPAUIErrorInfo@@@Z
??_7CSetupBase@FObj@@6B@
??3@YAXPAX@Z
??1CUnicodeString@FObj@@QAE@XZ
?destroy@CUnicodeStringBody@FObj@@QAEXXZ
?SetAppTitle@FObj@@YAXABVCUnicodeString@1@@Z
??0CUnicodeString@FObj@@QAE@PBG@Z
?ThrowUserException@FObj@@YAXXZ
?Initialize@FObj@@YA_NPBG0@Z
?Clean@FObj@@YAXXZ
?ReleaseBuffer@CUnicodeString@FObj@@QAEXH@Z
?GetBuffer@CUnicodeString@FObj@@QAEPAGH@Z
?GetEXEFileName@FileSystem@FObj@@YA?AVCUnicodeString@2@XZ
??1CSetupBase@FObj@@MAE@XZ
??1CString@FObj@@QAE@XZ
?CreateUnicodeString@CString@FObj@@QBE?AVCUnicodeString@2@I@Z
?destroy@CStringBody@FObj@@QAEXXZ
?ReleaseBuffer@CString@FObj@@QAEXH@Z
?GetBuffer@CString@FObj@@QAEPADH@Z
?emptyStringBody@CStringBody@FObj@@2V12@A
?emptyStringBody@CUnicodeStringBody@FObj@@2V12@A
?MessageBoxW@FObj@@YAHPBGH@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
??0CSetupBase@FObj@@IAE@ABVCUnicodeString@1@0W4TSetupType@1@@Z
?GetString@CSetupBase@FObj@@QBE?AVCUnicodeString@2@XZ
?SetString@CSetupBase@FObj@@QAEXABVCUnicodeString@2@@Z
?ReadText@CFile@FObj@@SA?AVCUnicodeString@2@ABV32@I@Z
?Mid@CUnicodeString@FObj@@QBE?AV12@H@Z
?concatStr@CUnicodeString@FObj@@AAEXPBGH@Z
?GenAssert@FObj@@YAXPBGJ@Z

msvcrt

_exit
__setusermatherr
_wcsnicmp
_initterm
__CxxFrameHandler
memmove
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
wcslen
iswctype
__wgetmainargs
_wcmdln
exit
_XcptFilter

oleaut32

SysFreeString
CreateErrorInfo
VariantInit
SysAllocString
VariantClear
VariantChangeType

ole32

CoCreateInstance
OleRun

fineobjfc

ord3007
ord2431
ord1384
ord453
ord2815
ord2701
ord2707
ord5573
ord5158
ord5183
ord4495
ord3900
ord5178
ord5176
ord3103
ord2109
ord5042
ord1182
ord3745
ord5590
ord2211
ord2255
ord4264
ord6285
ord4247
ord2870
ord3011
ord2710
ord1267
ord3161
ord1302
ord3364
ord3110
ord3028
ord1474
ord2345
ord4582
ord3933
ord4648
ord1317
ord5566
ord2882
ord4203
ord5370
ord793
ord583
ord886
ord3539
ord4415
ord3901
ord2813
ord3646
ord3652
ord3651

Exports

Exports

__FineObjUsed

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d688fcb20f2bd10cd7d8e3fae06c2e2

Headers

File Characteristics

Imports

kernel32

user32

fineobj

msvcrt

oleaut32

ole32

fineobjfc

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 28KB - Virtual size: 26KB