25c6b72100313a7644134ff31e773ee4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25c6b72100313a7644134ff31e773ee4_JaffaCakes118
Size

30KB
MD5

25c6b72100313a7644134ff31e773ee4
SHA1

38ef953eb421928fb85a4ba9b73e7213ebf68659
SHA256

afd2a6e59bf85801bc65bc962c9db6d5e8fc7c96bf4ad9a58bd4a769dd58f919
SHA512

8e37bbb089b59878b6c16bb40c8c3c0e31d2882492ff86989925f07f8f859de3a2d53021c889c2cd0d6ae56e320e575f24a7477e996f4598f287877a35827d81
SSDEEP

768:3axbp5O7U2syTPXHGOpblwgV/OJh5VQ/4:3axncnsGfRpBw2/OJh5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c6b72100313a7644134ff31e773ee4_JaffaCakes118

Files

25c6b72100313a7644134ff31e773ee4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vscprintf
_acmdln
_chmod
_mbcjmstojis
memcpy
_wtof
_adj_fpatan
_mbsncpy
_ismbbkpunct
_expand
_resetstkoflw
_wsystem
_wspawnv
isalpha
_wtmpnam
log10
__setusermatherr
_stat64
clock
_strset
getchar
printf
perror
_snwscanf
_safe_fdiv
_wstat
_wspawnvp
setlocale
memset
puts
_wsopen
_aligned_offset_malloc
_locking
_except_handler3
_ismbbkalnum
__p__fmode
fprintf
_controlfp
freopen
_ismbclegal
_aligned_offset_realloc
_adjust_fdiv
_cexit
_initterm
fscanf
_ismbstrail
_fcvt
_snscanf
fwscanf
ungetc
getwchar
_ftol
_beep
_exit
_getdcwd
wcstol
_execlp
_wopen
_lrotl
__set_app_type
fputwc
_mbsnbcpy
_spawnle
__getmainargs
fgets
_strtoui64
_cwprintf
_XcptFilter
_chkesp
exit
_ismbblead
_execvpe
_futime
_wremove
system
__p__commode
_isatty
_strlwr
_sys_errlist
_mbsupr

user32

IsWindowVisible
IsDlgButtonChecked
ClientToScreen
GetWindowLongA
EnableMenuItem
ExitWindowsEx
ShowWindowAsync
SetWindowPos
GetPropA
CreateWindowExA
GetSubMenu
DrawTextA
LoadAcceleratorsA
GetUserObjectSecurity
TranslateAcceleratorA
GetCapture
GetClassNameA
CheckRadioButton
IsZoomed
LoadMenuA
FillRect
MsgWaitForMultipleObjects
IntersectRect
TrackPopupMenuEx
ScrollWindowEx
GetWindowTextA
ReleaseDC
MoveWindow
GetDC
CheckMenuItem
RegisterClassExA
GetKeyState
ChildWindowFromPoint
RegisterWindowMessageA
LoadCursorA
RemoveMenu
EnumChildWindows
TrackPopupMenu
GetSysColor
CreateMenu
OffsetRect
GetCursorPos
ScreenToClient
ShowWindow
LoadIconA
GetParent
SetPropA
ReleaseCapture
GetMessageA
ModifyMenuA
DialogBoxParamA
SetWindowLongA
GetWindowRect

kernel32

GetStartupInfoA
GlobalMemoryStatus
lstrlenA
IsBadReadPtr
GetTickCount
DuplicateHandle
GetFileTime
GetCPInfo
GlobalAddAtomA
CreateEventA
IsValidCodePage
VirtualAlloc
SetThreadAffinityMask
GetModuleHandleA
TlsSetValue
MulDiv
GetACP
SetPriorityClass
GetSystemTimeAsFileTime
GetProcessWorkingSetSize
lstrcmpiA
SetProcessWorkingSetSize
GetComputerNameW
HeapReAlloc
CreateThread
SetErrorMode
GetSystemDirectoryA
RtlUnwind
IsBadStringPtrA
ExitProcess
lstrcatA
HeapFree
CreateFileMappingA
GetFileType
GetStringTypeA
LoadLibraryW
WaitForSingleObject
GetTimeFormatA
GetVersionExA
CloseHandle
GetStdHandle
TlsAlloc
GetCurrentProcessId

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 175B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 175B

.rsrc
Size: 512B - Virtual size: 4B