22ff1acf1a6c7ecafdb0d5a686e457d6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

22ff1acf1a6c7ecafdb0d5a686e457d6_JaffaCakes118
Size

169KB
MD5

22ff1acf1a6c7ecafdb0d5a686e457d6
SHA1

bb8e192ab0e2efedf6d3cc8c9744690c0e26ff5f
SHA256

da1ff72421209a3df6153b87b27f7e1a24e9ad6d2c2cb990fb51bce1cd1c4c9c
SHA512

6f120002ced4ef2fb93e91853660fec44ebc6643d6f29a60cd1524cb9a2ba9560538fef9d822c3207728bac7a148f495e1926f3649e33fbf36d48f637af9afa8
SSDEEP

3072:XbUsNSk+dpN2goBw69Non3iXMtvWJqRAq5e7G7VO8rhJZz2UXEvEr9RGBkuu46:AvjN2rnSyXYWf7+VOqh1XEvE9RF46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ff1acf1a6c7ecafdb0d5a686e457d6_JaffaCakes118

Files

22ff1acf1a6c7ecafdb0d5a686e457d6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3cedb2daf025cdf819aeb252ca540e52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

kernel32

DeleteVolumeMountPointA
RegisterWowExec
GetCurrentProcess
SetUnhandledExceptionFilter
lstrcat
CreateDirectoryA
CreateProcessW
VirtualAlloc
BeginUpdateResourceA
GetCurrencyFormatW
BaseUpdateAppcompatCache
Heap32ListFirst
LockFile
GetSystemDefaultUILanguage
GetTickCount
GetProfileIntW
InterlockedDecrement
LockResource
RemoveLocalAlternateComputerNameW
CopyLZFile
CreateProcessInternalA
AssignProcessToJobObject
SetVolumeMountPointW
TerminateProcess
CloseHandle
UnhandledExceptionFilter
HeapCreate
GetDiskFreeSpaceExA
GetCommConfig
GenerateConsoleCtrlEvent
GetSystemTimeAsFileTime
WriteConsoleInputVDMA
HeapValidate
GetCurrentProcessId
SystemTimeToFileTime
CancelDeviceWakeupRequest
WritePrivateProfileSectionA
FindAtomW
OutputDebugStringA
LoadLibraryA
GlobalSize
GetConsoleAliasW
GetThreadLocale
GetAtomNameA
ContinueDebugEvent
GetConsoleProcessList
FormatMessageW
RemoveLocalAlternateComputerNameA
CancelTimerQueueTimer
GetGeoInfoA
WriteConsoleW
SetConsoleCP
lstrcmpW
LZOpenFileW
EnumDateFormatsA
EnumCalendarInfoExW
SetUnhandledExceptionFilter
HeapCompact
QueryPerformanceCounter
GetLocaleInfoW
WriteTapemark
EnumDateFormatsExW
GetCurrentConsoleFont
MultiByteToWideChar
LZCreateFileW
GetLastError
FormatMessageA
InitializeCriticalSectionAndSpinCount
FindFirstChangeNotificationW
_lread
VerifyConsoleIoHandle
FindFirstVolumeMountPointA
_lwrite
LocalFree
FindCloseChangeNotification
SetMessageWaitingIndicator

msvcrt

__getmainargs
__setusermatherr
_c_exit
__initenv
_cexit
_exit
exit
_initterm
_XcptFilter
__set_app_type
_controlfp
swprintf

ntdll

NtQueryInformationProcess

secur32

LsaUnregisterPolicyChangeNotification
CompleteAuthToken
DeleteSecurityContext
GetUserNameExA
GetComputerObjectNameW
SecpTranslateNameEx
AddSecurityPackageA
EnumerateSecurityPackagesA
InitSecurityInterfaceW
ApplyControlToken
SealMessage

Sections

.brpynN
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iYu
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.IvnRZP
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Hamiq
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AK
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cedb2daf025cdf819aeb252ca540e52

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

ntdll

secur32

Sections

.brpynN Size: 2KB - Virtual size: 1KB

.iYu Size: 2KB - Virtual size: 1KB

.text Size: 13KB - Virtual size: 12KB

.IvnRZP Size: 2KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.Hamiq Size: 1KB - Virtual size: 7KB

.data Size: 9KB - Virtual size: 27KB

.AK Size: 2KB - Virtual size: 30KB

.rsrc Size: 132KB - Virtual size: 276KB

.brpynN
Size: 2KB - Virtual size: 1KB

.iYu
Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 12KB

.IvnRZP
Size: 2KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.Hamiq
Size: 1KB - Virtual size: 7KB

.data
Size: 9KB - Virtual size: 27KB

.AK
Size: 2KB - Virtual size: 30KB

.rsrc
Size: 132KB - Virtual size: 276KB