27d540d262db5d09988cb0a21a9ba7cf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27d540d262db5d09988cb0a21a9ba7cf_JaffaCakes118
Size

30KB
MD5

27d540d262db5d09988cb0a21a9ba7cf
SHA1

d8886ebd0173e3447d87a36f3ac68db0ce37cd91
SHA256

81c514a817cebce8fbe64c72f3edb4d22feac3652a0274c6e82ee72a691641b5
SHA512

49a3698d2f815b4ac12ca48f069e416140d5b72854076d77ca9c7234062e628970671d069c53354f0c35678697039adde0ce54bc2873a1b9a9877eab51381f7e
SSDEEP

768:1axbp5O7U2syTPXHGOpblwgV/OJh5VQ/4:1axncnsGfRpBw2/OJh5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27d540d262db5d09988cb0a21a9ba7cf_JaffaCakes118

Files

27d540d262db5d09988cb0a21a9ba7cf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vscprintf
_acmdln
_chmod
_mbcjmstojis
memcpy
_wtof
_adj_fpatan
_mbsncpy
_ismbbkpunct
_expand
_resetstkoflw
_wsystem
_wspawnv
isalpha
_wtmpnam
log10
__setusermatherr
_stat64
clock
_strset
getchar
printf
perror
_snwscanf
_safe_fdiv
_wstat
_wspawnvp
setlocale
memset
puts
_wsopen
_aligned_offset_malloc
_locking
_except_handler3
_ismbbkalnum
__p__fmode
fprintf
_controlfp
freopen
_ismbclegal
_aligned_offset_realloc
_adjust_fdiv
_cexit
_initterm
fscanf
_ismbstrail
_fcvt
_snscanf
fwscanf
ungetc
getwchar
_ftol
_beep
_exit
_getdcwd
wcstol
_execlp
_wopen
_lrotl
__set_app_type
fputwc
_mbsnbcpy
_spawnle
__getmainargs
fgets
_strtoui64
_cwprintf
_XcptFilter
_chkesp
exit
_ismbblead
_execvpe
_futime
_wremove
system
__p__commode
_isatty
_strlwr
_sys_errlist
_mbsupr

user32

IsWindowVisible
IsDlgButtonChecked
ClientToScreen
GetWindowLongA
EnableMenuItem
ExitWindowsEx
ShowWindowAsync
SetWindowPos
GetPropA
CreateWindowExA
GetSubMenu
DrawTextA
LoadAcceleratorsA
GetUserObjectSecurity
TranslateAcceleratorA
GetCapture
GetClassNameA
CheckRadioButton
IsZoomed
LoadMenuA
FillRect
MsgWaitForMultipleObjects
IntersectRect
TrackPopupMenuEx
ScrollWindowEx
GetWindowTextA
ReleaseDC
MoveWindow
GetDC
CheckMenuItem
RegisterClassExA
GetKeyState
ChildWindowFromPoint
RegisterWindowMessageA
LoadCursorA
RemoveMenu
EnumChildWindows
TrackPopupMenu
GetSysColor
CreateMenu
OffsetRect
GetCursorPos
ScreenToClient
ShowWindow
LoadIconA
GetParent
SetPropA
ReleaseCapture
GetMessageA
ModifyMenuA
DialogBoxParamA
SetWindowLongA
GetWindowRect

kernel32

GetStartupInfoA
GlobalMemoryStatus
lstrlenA
IsBadReadPtr
GetTickCount
DuplicateHandle
GetFileTime
GetCPInfo
GlobalAddAtomA
CreateEventA
IsValidCodePage
VirtualAlloc
SetThreadAffinityMask
GetModuleHandleA
TlsSetValue
MulDiv
GetACP
SetPriorityClass
GetSystemTimeAsFileTime
GetProcessWorkingSetSize
lstrcmpiA
SetProcessWorkingSetSize
GetComputerNameW
HeapReAlloc
CreateThread
SetErrorMode
GetSystemDirectoryA
RtlUnwind
IsBadStringPtrA
ExitProcess
lstrcatA
HeapFree
CreateFileMappingA
GetFileType
GetStringTypeA
LoadLibraryW
WaitForSingleObject
GetTimeFormatA
GetVersionExA
CloseHandle
GetStdHandle
TlsAlloc
GetCurrentProcessId

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 175B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 175B

.rsrc
Size: 512B - Virtual size: 4B