23dcc38ceace00ba3f89eccb0bc67fc0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

23dcc38ceace00ba3f89eccb0bc67fc0_JaffaCakes118
Size

337KB
MD5

23dcc38ceace00ba3f89eccb0bc67fc0
SHA1

c2c5560a7cd73c4a443eabb96ad6849fa67ee489
SHA256

f1496be23903bb6d3e63678176f717c45a6249e6c2f939407536b4d590ac278a
SHA512

f2d8f7b8b0fa911ee7b351222d9ad7cc87d2ae4ca4114fe232dd8dbc33d1b3ee7b681434dcbfad66ea1833c5cbec4af0553684f88805af23b247797cb8aa3590
SSDEEP

6144:ZLH3uqcc3UCM/CJzABs3TNdmsGiCoFafSF704qEoIhDq4:h3ub/CMKJzABWhPCoEm40u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23dcc38ceace00ba3f89eccb0bc67fc0_JaffaCakes118

Files

23dcc38ceace00ba3f89eccb0bc67fc0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c22712c7d67677781f98b8474b57c1dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
ShowOwnedPopups
GetWindowTextA
EnableWindow
PostQuitMessage
CloseWindow
WaitForInputIdle
ReleaseDC
AttachThreadInput
GetSystemMetrics
GetDesktopWindow
RegisterClassExA
SetCursorPos
GetMenuDefaultItem
EndDialog
GetMenu
CharUpperA
GetMenuState
KillTimer
EnableMenuItem
CharUpperBuffA
FillRect
DestroyMenu
CheckRadioButton
ClientToScreen
GetMenuItemID
RegisterClassA
AppendMenuA
TranslateMessage
DestroyCursor
GetMenuStringA
MoveWindow
RemoveMenu
LoadStringA
DestroyWindow
CreateWindowExA
FrameRect
GetParent
SetScrollInfo
ScrollWindow
EnumThreadWindows
CopyRect
UnregisterClassA
SetTimer
ShowCursor

kernel32

GetSystemDirectoryA
GetModuleHandleA
ExitProcess
GetCurrentProcess
LeaveCriticalSection
FindResourceA
LoadResource
CreateEventA
SizeofResource
LocalAlloc
DeviceIoControl
LocalFree
VirtualProtectEx
LoadLibraryA
GetProcAddress
UnlockFile
lstrcmpi
GetEnvironmentVariableA
OpenEventA
ReadConsoleOutputA
GetCurrentThread
LocalFileTimeToFileTime
GetConsoleTitleA
CopyFileA
GetTickCount
GlobalSize
SetEndOfFile
GetACP
GetExitCodeThread
BuildCommDCBAndTimeoutsA
ClearCommError
PurgeComm
GetPriorityClass
GetNamedPipeInfo
CreateFileMappingA
GetModuleFileNameA

wsock32

htonl
sendto
accept
WSACleanup
socket
htons
WSAStartup
closesocket
gethostbyaddr
send
connect
setsockopt
shutdown
getsockname
gethostname
bind
gethostbyname
WSAGetLastError
recvfrom
select
recv
ntohs
listen
ntohl

gdi32

GetObjectA
GetKerningPairsA
LineTo
GetWindowExtEx
ResizePalette
GetSystemPaletteEntries
GetBkColor
GetBoundsRect
Ellipse
GetArcDirection
GetDeviceCaps
GetBkMode
GetPixelFormat
SetViewportExtEx
MoveToEx
GetNearestColor
GetPath

Sections

AUTO
Size: 12KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DGROUP
Size: 8KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 307KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c22712c7d67677781f98b8474b57c1dd

Headers

File Characteristics

Imports

user32

kernel32

wsock32

gdi32

Sections

AUTO Size: 12KB - Virtual size:

.rdata Size: 1024B - Virtual size:

DGROUP Size: 8KB - Virtual size:

.idata Size: 3KB - Virtual size:

.rsrc Size: 307KB - Virtual size:

.reloc Size: 4KB - Virtual size:

AUTO
Size: 12KB - Virtual size:

.rdata
Size: 1024B - Virtual size:

DGROUP
Size: 8KB - Virtual size:

.idata
Size: 3KB - Virtual size:

.rsrc
Size: 307KB - Virtual size:

.reloc
Size: 4KB - Virtual size: