2e279a63f089f27bac05344dddd10c74_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e279a63f089f27bac05344dddd10c74_JaffaCakes118
Size

481KB
MD5

2e279a63f089f27bac05344dddd10c74
SHA1

b661286b84f5c11c134ce5dd50f999765bb93bd5
SHA256

22ea1313e43e7310f5808535f893e862127494e9e06d8934c6adbcbc95300522
SHA512

4f73ecbfda76b89bad65557a09a38fd053f34aed7fe1bbb07b46caa22c67250051b5b73a4246d870a30d7e3a0e3f8decd7a2295e604be1b8f9cfe62a450995c3
SSDEEP

12288:NMvLI4RY6mAPqPTFIBcdNIKFopEQc6w0c1XRetQZkdWJbKN:Ng/CZIKdWKFoUn0c1QQZk0JbKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e279a63f089f27bac05344dddd10c74_JaffaCakes118

Files

2e279a63f089f27bac05344dddd10c74_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f90ee035851954b8f0e9895f432ad74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
PrintDlgA

user32

ValidateRect
DdeUnaccessData
GetMonitorInfoA
LoadStringA
EndPaint
SetWindowsHookW
LoadStringW
GetScrollRange
MessageBoxIndirectW
SetWindowLongA
GetQueueStatus
RegisterClassExA
SendMessageW
CascadeChildWindows
DeleteMenu
GetClipboardOwner
RegisterClassA

shell32

SHGetInstanceExplorer

kernel32

GetProcAddress
GetCurrentThread
GetConsoleCP
GetModuleFileNameW
GetStringTypeW
IsBadWritePtr
HeapFree
GetEnvironmentStringsW
GetCPInfo
WideCharToMultiByte
InterlockedIncrement
HeapReAlloc
HeapCreate
CreateMutexA
VirtualAlloc
UnhandledExceptionFilter
SetFilePointer
GetProcessAffinityMask
GetTimeZoneInformation
GetLastError
MultiByteToWideChar
FlushFileBuffers
LeaveCriticalSection
GetEnvironmentStrings
SetStdHandle
LoadLibraryA
GetStartupInfoA
GetFileType
OpenMutexA
InterlockedDecrement
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCommandLineA
RtlUnwind
GetStartupInfoW
TlsAlloc
TlsFree
SetHandleCount
VirtualQuery
GetCurrentProcess
FreeEnvironmentStringsW
SetLastError
FreeEnvironmentStringsA
TlsSetValue
GetSystemTimeAsFileTime
WriteFile
TlsGetValue
HeapDestroy
GetLocalTime
SetEnvironmentVariableA
GetSystemTime
GetStringTypeA
HeapAlloc
EnterCriticalSection
CompareStringW
GetTickCount
ReadFile
GetModuleFileNameA
QueryPerformanceCounter
GetModuleHandleA
LCMapStringA
CompareStringA
LCMapStringW
GetStdHandle
GetVersion
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
CloseHandle
ExitProcess
VirtualFree
GetCommandLineW
GetProcAddress

comctl32

InitCommonControlsEx

gdi32

CreateScalableFontResourceW

wininet

GopherGetAttributeW
RetrieveUrlCacheEntryStreamA
SetUrlCacheEntryGroup
InternetGetCertByURL
GetUrlCacheHeaderData

Sections

.text
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f90ee035851954b8f0e9895f432ad74

Headers

File Characteristics

Imports

comdlg32

user32

shell32

kernel32

comctl32

gdi32

wininet

Sections

.text Size: 307KB - Virtual size: 306KB

.rdata Size: 50KB - Virtual size: 68KB

.data Size: 102KB - Virtual size: 102KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 307KB - Virtual size: 306KB

.rdata
Size: 50KB - Virtual size: 68KB

.data
Size: 102KB - Virtual size: 102KB

.rsrc
Size: 20KB - Virtual size: 20KB