2b0b314efa0eea9d109ba8835843aa37_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2b0b314efa0eea9d109ba8835843aa37_JaffaCakes118
Size

296KB
MD5

2b0b314efa0eea9d109ba8835843aa37
SHA1

716b0e67762e4803f035d815600c9e40f2910fc2
SHA256

098f5a433d47235d80138be3e27fcdf58ea9322d300c8c6b34c42cd2bbd27edf
SHA512

20909820981bc6f47d0b5ae5fa18c12ca690dbc194ed81bac095dd683292b10b080d4910addc79ff6ffc437af9746e6c30543da5b27cfd9b34e804b6c8ce72fe
SSDEEP

3072:tdEAzJ6ZfRJMkq9rmqXgyFHlBUnY+9hSxlmKkgcUVw4MrmbZ9tiDYr5pAwHFDeY2:AAkZPMt96qXLASyUpM09TpKIkuv84QW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0b314efa0eea9d109ba8835843aa37_JaffaCakes118

Files

2b0b314efa0eea9d109ba8835843aa37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f880c059e1d4be84e9fdfc21e8c9bff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

VirtualQuery
SetConsoleCtrlHandler
SetEnvironmentVariableA
HeapFree
GetCurrentDirectoryW
TlsAlloc
GetNumberFormatW
TlsFree
GetCurrentThreadId
FlushFileBuffers
GetACP
UnlockFile
GetCurrentThread
Sleep
HeapCreate
GetTimeZoneInformation
lstrlen
GetSystemDefaultLangID
SetFilePointer
GetLocaleInfoA
HeapAlloc
CompareStringW
GetCurrentProcessId
GetOEMCP
UnhandledExceptionFilter
GetCPInfo
TlsGetValue
LoadLibraryA
GlobalFindAtomA
OpenMutexA
FindFirstFileExW
GetStdHandle
GetConsoleMode
SetLastError
TlsSetValue
GetModuleHandleW
WriteConsoleA
GetPrivateProfileStringA
GetUserDefaultLCID
EnumDateFormatsA
GetProcAddress
WriteFile
SetHandleCount
HeapReAlloc
CreateMutexA
EnumSystemLocalesA
LCMapStringW
InitializeCriticalSectionAndSpinCount
CloseHandle
GetConsoleCP
CompareStringA
GetShortPathNameA
FreeLibrary
WriteConsoleW
GetPrivateProfileStructA
DeleteFiber
HeapDestroy
GetVolumeInformationA
lstrcmpA
IsDebuggerPresent
HeapSize
RtlUnwind
GetLastError
LeaveCriticalSection
GetEnvironmentStrings
GetStringTypeA
InterlockedIncrement
SetUnhandledExceptionFilter
GetStringTypeW
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
ExitProcess
WideCharToMultiByte
QueryPerformanceCounter
IsValidCodePage
DeleteCriticalSection
GetDateFormatA
GetStartupInfoA
GetCurrentProcess
GetModuleHandleA
IsValidLocale
GetTimeFormatA
GetEnvironmentStringsW
GetTickCount
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
SetStdHandle
FreeEnvironmentStringsA
CreateFileA
GetFileType
GetModuleFileNameA
GetConsoleOutputCP
GetLocaleInfoW
TerminateProcess
VirtualAlloc
InterlockedDecrement
SetWaitableTimer
GetCommandLineA
ReadFile
LCMapStringA
VirtualFree

user32

ModifyMenuW
GetMenuBarInfo
SwapMouseButton
SetWindowPlacement
CheckMenuRadioItem
ShowWindow
GetClipboardFormatNameW
MessageBoxW
RegisterClassA
GetMenuDefaultItem
DrawMenuBar
GetMonitorInfoW
GetClassNameA
LoadImageA
EnumWindowStationsA
ToAscii
TabbedTextOutA
SystemParametersInfoW
MessageBoxExW
DialogBoxParamA
CreateWindowExW
PeekMessageW
RegisterClassExA
DragDetect
BroadcastSystemMessageA
ChangeDisplaySettingsA

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f880c059e1d4be84e9fdfc21e8c9bff

Headers

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 11KB - Virtual size: 28KB

.data Size: 89KB - Virtual size: 88KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 11KB - Virtual size: 28KB

.data
Size: 89KB - Virtual size: 88KB

.rsrc
Size: 11KB - Virtual size: 11KB