268fc3ea62f9269442509aa3be4c7436_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

268fc3ea62f9269442509aa3be4c7436_JaffaCakes118
Size

324KB
MD5

268fc3ea62f9269442509aa3be4c7436
SHA1

eb04598fdf5c17ba2e2a41bca4d69bf82b1d366e
SHA256

7416f3c92b0e5a440d2c14c8c91a56056323bb93c4f7d618c36a6ffa3b23403e
SHA512

b1ce48b50c9c09c59738486d9a30fb8e372361371b3fc5771da94bffbd2321d39e9868c409c51fa3e91ede6ef00c470b13d887c568b7afa2da19bb0dbcec8e0f
SSDEEP

6144:FEalVSuOXIdajc6ObNtBCr+5gSxB3vPnYqs6WX11DDY5y3l6:FEalV/uIdyczB+PSxB3vPYqCl1DDAy3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268fc3ea62f9269442509aa3be4c7436_JaffaCakes118

Files

268fc3ea62f9269442509aa3be4c7436_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2438f6804391c2b7bf47363ce66fe20e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\hhjtcu\oevw\

Imports

kernel32

IsValidLocale
GetCurrentProcess
WaitCommEvent
GetComputerNameA
GetLocaleInfoW
GetCommandLineA
VirtualProtect
GetLogicalDriveStringsW
EnumSystemLocalesA
GetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
GetLocaleInfoA
EnumSystemCodePagesW
GetCPInfo
CompareStringW
TlsSetValue
LCMapStringA
GetPrivateProfileSectionA
GetDiskFreeSpaceA
ReadConsoleOutputAttribute
DeleteFileW
HeapReAlloc
InitializeCriticalSection
OpenMutexA
CloseHandle
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetProcAddress
FlushFileBuffers
GetDateFormatA
GetCurrentThread
GetCurrentThreadId
GetACP
lstrcmpA
CreateSemaphoreW
SetStdHandle
SetEnvironmentVariableA
WaitNamedPipeA
OpenWaitableTimerW
CommConfigDialogA
TerminateProcess
CreateMutexA
TlsGetValue
LCMapStringW
GetUserDefaultLCID
LoadLibraryExA
DeleteCriticalSection
RtlFillMemory
LocalFlags
SetConsoleWindowInfo
GetEnvironmentStrings
GetThreadContext
FreeEnvironmentStringsW
VirtualAlloc
VirtualFree
ReleaseMutex
GetSystemDirectoryW
VirtualQuery
HeapDestroy
IsValidCodePage
GetLastError
SetCurrentDirectoryW
LeaveCriticalSection
SetHandleCount
CompareStringA
EnumDateFormatsExA
GetStringTypeA
WaitForMultipleObjects
GlobalFlags
GetTimeFormatW
IsBadWritePtr
GetFileType
CreateFileMappingA
InterlockedExchange
ExitProcess
ContinueDebugEvent
HeapSize
GetOEMCP
GetStartupInfoA
GlobalFix
SetFilePointer
MoveFileA
GetSystemInfo
FreeEnvironmentStringsA
HeapFree
SetLastError
EnterCriticalSection
GetMailslotInfo
TlsFree
ConnectNamedPipe
FormatMessageW
TlsAlloc
GetFileAttributesW
RtlUnwind
LocalUnlock
GetUserDefaultLangID
GetVersionExA
GetEnvironmentStringsW
WriteFile
EnumResourceLanguagesA
WriteFileEx
lstrcpyn
WideCharToMultiByte
GetModuleHandleA
GetAtomNameA
WritePrivateProfileSectionW
ReadFile
GetTimeFormatA
RaiseException
ResumeThread
GetTimeZoneInformation
LoadLibraryA
GetStdHandle
UnlockFileEx
GetTempFileNameA
GetProcessHeaps
QueryPerformanceCounter
FoldStringA
HeapCreate
GetTickCount
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
HeapAlloc
EnumDateFormatsExW
GetPrivateProfileStringA
GetThreadPriority

user32

PostMessageA
RegisterClassExA
GetMessagePos
LoadMenuW
ExcludeUpdateRgn
GetWindowModuleFileNameA
SendMessageW
DrawIcon
DestroyWindow
GetMenuInfo
SetClassWord
IsWindow
InsertMenuItemA
OffsetRect
DdeCreateDataHandle
DestroyCursor
GetTitleBarInfo
SetWindowPlacement
ShowWindow
GetKeyboardType
WindowFromPoint
DefWindowProcW
GetScrollInfo
PostQuitMessage
GetKeyNameTextW
SetUserObjectSecurity
DdeQueryStringA
DdeSetQualityOfService
GetScrollBarInfo
RegisterClassA
GetWindowLongW
IsWindowVisible
CopyAcceleratorTableW
CreateWindowExA
SetRect
VkKeyScanA
BlockInput
DdeKeepStringHandle
MessageBoxA
SwitchDesktop
CascadeWindows
ChangeDisplaySettingsA
InsertMenuItemW
CreateMDIWindowA
GetClassLongW
UnhookWinEvent
SendMessageTimeoutW
SetForegroundWindow
DefDlgProcA
SetClipboardViewer
EnumClipboardFormats
MenuItemFromPoint

wininet

InternetSecurityProtocolToStringW
UnlockUrlCacheEntryFileW
InternetSetCookieA
InternetGetCookieW
InternetWriteFileExW
FtpGetCurrentDirectoryW

comctl32

ImageList_AddMasked
InitCommonControlsEx

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2438f6804391c2b7bf47363ce66fe20e

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

wininet

comctl32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 88KB - Virtual size: 93KB

.rsrc Size: 76KB - Virtual size: 73KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 88KB - Virtual size: 93KB

.rsrc
Size: 76KB - Virtual size: 73KB