2830f22c07a2c1ef94757cf17da3a593_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2830f22c07a2c1ef94757cf17da3a593_JaffaCakes118
Size

143KB
MD5

2830f22c07a2c1ef94757cf17da3a593
SHA1

a7b8b5a094cfd87954445b91d35c514f3cb4f3e3
SHA256

db3f816145d7894d2dcc89b01a6b353dea666b3cb0256c23f8ecf0f408ff2534
SHA512

65b87d7e53d732749e3bb1a2ceb30d7dd1b646c4477cee3bf14fb36f13ba0a22c0d49dd60f15b964c397bcf6b9bc0c1ffa69f0fd0a8b733407529b95371f85c1
SSDEEP

3072:eUVpfJbGdHhK6JAwR8t9RoVXp3Z0FErPjfSy2Y:eUVpRUzAw2tEJp68qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2830f22c07a2c1ef94757cf17da3a593_JaffaCakes118

Files

2830f22c07a2c1ef94757cf17da3a593_JaffaCakes118
.exe windows:6 windows x86 arch:x86

dfe527274833339ba6b0a02a58073d23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
SetEvent
GetCurrentThreadId
GetCommandLineW
GetProcessHeap
GetTickCount
LocalAlloc
GetCommandLineW
GetModuleHandleW
WaitForSingleObject
VirtualFree
GetTickCount
VirtualFree
GetTickCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentThreadId
WaitForSingleObject
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
VirtualFree
GetCurrentProcess
GetACP
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCommandLineW
LocalFree
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
SetUnhandledExceptionFilter
WaitForSingleObject
LocalFree
VirtualFree
SetEvent
GetCommandLineA
VirtualFree
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineW
SetEvent
QueryPerformanceCounter
WaitForSingleObject
FormatMessageW
GetModuleHandleA
SetUnhandledExceptionFilter
GetCommandLineA
GetModuleHandleW
GetCurrentProcessId
GetACP
WaitForSingleObject
LocalAlloc
SetUnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleA
GetACP
SleepEx
GetModuleHandleA
SetEvent
GetACP
SetEvent
GetModuleFileNameA
WaitForSingleObject
GetCurrentThreadId
GetACP
GetModuleHandleW
GetProcessHeap
WaitForSingleObject
SetUnhandledExceptionFilter
GetACP
GetCommandLineW
SetUnhandledExceptionFilter
GetCommandLineW
SetEvent
GetModuleHandleW
FormatMessageW
QueryPerformanceCounter
GetCurrentThreadId
VirtualFree
GetCommandLineW
GetProcessHeap
SetEvent
GetCurrentProcessId
GetProcessHeap
GetModuleFileNameA
GetCurrentProcess
WaitForSingleObject
WaitForSingleObject
GetCurrentThreadId
GetModuleHandleA
GetTickCount
WaitForSingleObject
WaitForSingleObject
SetEvent
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetCommandLineW
GetModuleHandleW
GetCurrentThreadId
GetProcessHeap
FormatMessageW
QueryPerformanceCounter
GetCommandLineA
LocalFree
MultiByteToWideChar

gdi32

GetDeviceCaps
BitBlt
SelectObject
BitBlt
SetTextColor
CreateCompatibleBitmap
SelectObject
GetTextMetricsW
PatBlt
SelectObject
GetStockObject
MoveToEx
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
DeleteObject
GetObjectW
GetTextMetricsW
PatBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
GetStockObject
SelectObject
SelectObject
CreateCompatibleBitmap
MoveToEx
GetStockObject
LineTo
GetStockObject
LineTo
BitBlt
MoveToEx
CreateCompatibleDC
LineTo
DeleteDC
SetTextColor
CreateCompatibleDC
GetTextMetricsW
CreateCompatibleDC
LineTo
GetObjectW
LineTo
GetTextMetricsW
LineTo
SelectObject
GetTextMetricsW
LineTo
GetTextMetricsW
LineTo
MoveToEx
DeleteObject
GetDeviceCaps
SelectObject
DeleteDC
PatBlt
PatBlt
CreateCompatibleBitmap
DeleteObject
MoveToEx
SetTextColor
SetTextColor
GetStockObject
GetDeviceCaps
PatBlt
DeleteDC
MoveToEx
BitBlt
SelectObject
CreateCompatibleBitmap
SetTextColor
CreateCompatibleDC
BitBlt
LineTo
SetTextColor
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
DeleteObject
LineTo
CreateCompatibleDC
GetObjectW
DeleteObject

user32

CreateWindowExW
GetDC
CreateWindowExW
GetSystemMetrics
GetWindowRect
GetWindowRect
GetDlgItem
GetSystemMetrics
GetDC
CreateWindowExW
PostMessageW
GetSystemMetrics
GetMessageW
DestroyWindow
ShowWindow
PostMessageW
DefWindowProcW
ReleaseDC
GetWindowRect
GetDC
GetDlgItem
SetTimer
LoadIconW
ReleaseDC
LoadIconW
CreateWindowExW
PostMessageW
GetSystemMetrics
ReleaseDC
SetTimer
GetDlgItem
GetDlgItem
GetMessageW
ReleaseDC
LoadIconW
SendMessageW
DefWindowProcW
GetSystemMetrics
DestroyWindow
ShowWindow
DefWindowProcW
CreateWindowExW
SetTimer
ShowWindow
GetDlgItem
CreateWindowExW
ReleaseDC
GetSystemMetrics
SendMessageW
GetMessageW
SendMessageW
CreateWindowExW
LoadIconW
ShowWindow
GetSystemMetrics
GetMessageW
SetTimer
GetDC
SendMessageW
DefWindowProcW
DefWindowProcW
PostMessageW
GetMessageW
GetSystemMetrics
SetTimer
GetWindowRect
ShowWindow
DestroyWindow
GetDlgItem
LoadIconW
GetSystemMetrics
GetMessageW
DestroyWindow
GetDlgItem
GetMessageW
PostMessageW
SetTimer
LoadIconW
DestroyWindow
GetDC
DestroyWindow
GetSystemMetrics
GetSystemMetrics
ReleaseDC
SendMessageW
GetSystemMetrics
GetWindowRect

ntdll

NtAllocateVirtualMemory

Sections

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfe527274833339ba6b0a02a58073d23

Headers

File Characteristics

Imports

kernel32

gdi32

user32

ntdll

Sections

.data Size: 24KB - Virtual size: 24KB

.data Size: 7KB - Virtual size: 8KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 2KB - Virtual size: 124KB

.data
Size: 24KB - Virtual size: 24KB

.data
Size: 7KB - Virtual size: 8KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 2KB - Virtual size: 124KB