2acee2d99debbdd676627895a3dc5a92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2acee2d99debbdd676627895a3dc5a92_JaffaCakes118
Size

857KB
MD5

2acee2d99debbdd676627895a3dc5a92
SHA1

ad428d01cc740cfb6cf60cc19fba3e8254683d8e
SHA256

277962c8e35ab58a37ee55851676359979053fcf5a7365392a3b12b4af64b36d
SHA512

bb65cdcbcb4e22868aefa477f77a78a0a881be15fd574d338bde39ad1ae5056267cf2ffebd549b00c18e40b0959fcf475bd7f9a12642878c0fbc208ed7bcd619
SSDEEP

12288:84kw+MXK5foE3XRe7VimhOtKIYGaAKh1xp2N08Qqyqwy16M4FvpODGfLX:8Jvp3XRe7VimhTIY11xKQ211wpOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2acee2d99debbdd676627895a3dc5a92_JaffaCakes118

Files

2acee2d99debbdd676627895a3dc5a92_JaffaCakes118
.exe windows:5 windows x86 arch:x86

85ae9b65a95381dfd91f0dbdfb4e2f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileStringA
LocalAlloc
OutputDebugStringW
GetComputerNameW
SetEndOfFile
SearchPathW
FindResourceExW
LoadLibraryA
OutputDebugStringA
CompareStringW
DeleteCriticalSection
GetTickCount
GetWindowsDirectoryW
HeapSize
GlobalAlloc
ExitProcess
SetFileAttributesW
FreeEnvironmentStringsW
RtlUnwind
LCMapStringA
GetLocaleInfoW
GetEnvironmentStrings
RemoveDirectoryW
SetEvent
ResumeThread
LocalFree
VirtualAlloc
ReleaseSemaphore
UnhandledExceptionFilter
GetCPInfo
LockResource
GetSystemDefaultLangID
GetDateFormatW
MulDiv
FindResourceW
InitializeCriticalSectionAndSpinCount

msvcrt

__dllonexit
??3@YAXPAX@Z
_XcptFilter
iswspace
??0exception@@QAE@ABV0@@Z
__getmainargs
exit
__set_app_type
?what@exception@@UBEPBDXZ
_wtol
??2@YAPAXI@Z
wcstoul
_wcsicmp
_cexit
iswdigit
__p__commode

user32

CharNextA
RegisterClassW
DestroyIcon
TrackPopupMenu
CallWindowProcA
GetWindowTextLengthW
ReleaseDC
SendDlgItemMessageW
SetFocus
MsgWaitForMultipleObjects
EndPaint
SystemParametersInfoW
RegisterClassA
GetNextDlgTabItem
RedrawWindow
GetActiveWindow
DefWindowProcW
CharNextW
GetDlgCtrlID
GetMessageW
DrawTextA
GetScrollInfo
SetWindowRgn
GetSystemMenu
LoadIconW
LoadBitmapW

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85ae9b65a95381dfd91f0dbdfb4e2f30

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 162KB - Virtual size: 162KB

.rdata Size: 601KB - Virtual size: 601KB

.data Size: 90KB - Virtual size: 1.5MB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 162KB - Virtual size: 162KB

.rdata
Size: 601KB - Virtual size: 601KB

.data
Size: 90KB - Virtual size: 1.5MB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB