2b9d7c17b4582e4e0a7f90223b1359c2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2b9d7c17b4582e4e0a7f90223b1359c2_JaffaCakes118
Size

320KB
MD5

2b9d7c17b4582e4e0a7f90223b1359c2
SHA1

8d5f6cd8974a30b178c50e30af4a1998dede05fc
SHA256

c9e90cd3ac4a2a7316dcc75c2d9851250547f85d83b7ca6e316ea9d8a38e6f8d
SHA512

5173b8e66c644bfa8f1d9a0b9780063b35de441fd49f0d2628c3a5212f741e7f428c8fe69b3e455c05177a93882540c6a7277b594678c0493f5f257205c4de4b
SSDEEP

6144:FJWz4r5m91QyYfxkdQJ9RCoEeGLuMK2KqlxLeYDhZ1o/kXSG0jFNJfqaYdD:F8z4Z+dc9RCoEZLRlxLDhPj05NJgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9d7c17b4582e4e0a7f90223b1359c2_JaffaCakes118

Files

2b9d7c17b4582e4e0a7f90223b1359c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

atoi
memmove

user32

wvsprintfW
wsprintfW
wsprintfA
UpdateWindow
TranslateMessage
SetWindowLongW
SetTimer
SetRect
SetCursor
SetClipboardData
SendMessageW
ReleaseDC
RegisterClassW
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
LoadStringA
LoadCursorW
KillTimer
IsWindow
InvalidateRect
GetWindowLongW
GetParent
GetMessageW
GetDC
GetClipboardData
GetClientRect
GetClassInfoW
GetAsyncKeyState
EqualRect
EndPaint
EmptyClipboard
DispatchMessageW
DefWindowProcW
CreateWindowExW
CloseClipboard
ClientToScreen
BeginPaint

kernel32

lstrlenW
lstrlenA
lstrcpynW
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcatW
lstrcatA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
Sleep
SetThreadPriority
SetFilePointer
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalUnlock
LocalLock
LocalHandle
LocalFree
LocalAlloc
LoadLibraryW
CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadPriority
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalUnlock
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
HeapFree

gdi32

SetWindowOrgEx
SelectPalette
SelectObject
RealizePalette
PatBlt
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GetDCOrgEx
GetClipBox
DeleteObject
CreatePalette

winmm

mmioWrite
timeGetTime
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
mmioSeek
waveInStop
waveInUnprepareHeader
waveOutGetNumDevs
SendDriverMessage
OpenDriver
CloseDriver
mmioRead
mmioOpenW
mmioFlush
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
waveInStart
mciSendStringW

advapi32

RegCloseKey
RegCreateKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
ngettext
set_relocation_prefix
textdomain

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

Imports

ntdll

user32

kernel32

gdi32

winmm

advapi32

version

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB