2ba7ea33ab4906cff0945e1beeb3c75c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2ba7ea33ab4906cff0945e1beeb3c75c_JaffaCakes118
Size

352KB
MD5

2ba7ea33ab4906cff0945e1beeb3c75c
SHA1

e252421a3d6e861b9823f507c5f9dc77ea0680db
SHA256

83b620ef7188be162494a8fa118b7a7d61ec2a5f59b29639889da8eaf3421203
SHA512

1a705e7a2b3c13fa0bb26695e292016ac08a7fbf7e38bdfc6c574409d0131ac8aa5aae47f44c2c20a24c6fbb910d209e60d3dbb3a2dcf726d809e75e34de6460
SSDEEP

6144:ps6hC6NzmVnDwtMX7mFIABELLSqf0OlGpSnbXQi/WScU/EeU:X46xVtt/BS2qfYSbAfU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ba7ea33ab4906cff0945e1beeb3c75c_JaffaCakes118

Files

2ba7ea33ab4906cff0945e1beeb3c75c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69ea414327d825d16a08dee4f1b09588

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
GetPrivateProfileSectionW
ReadFile
SetConsoleActiveScreenBuffer
IsBadWritePtr
DuplicateHandle
OpenSemaphoreW
CreateIoCompletionPort
GetUserDefaultLangID
GetEnvironmentStringsW
ExitThread
EnumCalendarInfoA
GlobalFindAtomW
LocalAlloc
UnmapViewOfFile
GlobalUnlock
SetEndOfFile
EnumResourceLanguagesW
GetUserDefaultLCID
GlobalReAlloc
GetTapeStatus
CopyFileExW
WriteProcessMemory
lstrcmpA
GetLocaleInfoW
FileTimeToLocalFileTime
GetDriveTypeA
IsBadStringPtrA
GetProfileIntA
GetFileInformationByHandle
IsProcessorFeaturePresent
CreateWaitableTimerA
FindResourceExW
GetCPInfo
FindFirstFileA
PurgeComm
GetLongPathNameA
GetCompressedFileSizeW
GetPrivateProfileStringW
LocalSize
lstrcpyA
SetThreadAffinityMask
GetSystemDefaultLangID
PulseEvent
GetDiskFreeSpaceExA
GetPrivateProfileStringA
FatalAppExitA
QueryDosDeviceA
FreeResource
SetConsoleMode
CreatePipe
SystemTimeToFileTime
CreateFileW
SetThreadPriorityBoost
lstrcpynA
InitializeCriticalSection
RemoveDirectoryW
GetCurrentProcessId
VirtualAllocEx
VirtualFree
CancelIo
GetCommandLineW
CompareStringA
GlobalDeleteAtom
ReadConsoleOutputA
GetVersionExA
GetCommandLineA
GetSystemTime
EnumResourceNamesW
SetEnvironmentVariableA
GetShortPathNameW
GetHandleInformation
ExpandEnvironmentStringsW
_lopen
GetOEMCP
SetThreadLocale
ReadFileScatter
CreateMutexA
ReadConsoleInputW
FindNextChangeNotification
lstrcmpiA
GlobalFindAtomA
DosDateTimeToFileTime
ReadDirectoryChangesW
WritePrivateProfileSectionA
EnumDateFormatsW
GetComputerNameW
lstrlenA
VirtualProtect
_lread
ExitProcess

user32

EnumDisplayDevicesW
CreateAcceleratorTableA
VkKeyScanA
IsDialogMessageW
SendMessageA
FindWindowExA
GetMenuItemInfoA
GetThreadDesktop
wvsprintfA
SetDlgItemTextW
WindowFromPoint
CreatePopupMenu
GetQueueStatus
SetWindowTextW
CopyAcceleratorTableA
ModifyMenuW
CascadeWindows
GetWindowDC
InternalGetWindowText
EnumDisplaySettingsA
GetAncestor
SetRect
ModifyMenuA
PostMessageW
GetWindowTextA
ChildWindowFromPoint
GetUserObjectInformationW

gdi32

GetTextFaceA
GetRegionData
SwapBuffers
SetMapMode
StrokePath

comdlg32

GetSaveFileNameW
PageSetupDlgW

advapi32

GetTokenInformation
InitializeAcl
GetPrivateObjectSecurity
StartServiceW
SetEntriesInAclW
LookupAccountNameA
AccessCheckAndAuditAlarmA
OpenSCManagerA
RegCloseKey
RegEnumValueW
SetSecurityInfo
OpenProcessToken

shell32

SHGetDesktopFolder
SHFileOperationA
SHGetSpecialFolderPathA
SHFileOperationW
SHAddToRecentDocs
Shell_NotifyIconA

ole32

CoSwitchCallContext
CoFileTimeNow
CoGetObject
CoCreateInstanceEx
CoTaskMemRealloc

oleaut32

SysStringLen
SysFreeString

comctl32

ImageList_BeginDrag
DestroyPropertySheetPage
_TrackMouseEvent
CreateStatusWindowW

shlwapi

SHAutoComplete
SHRegQueryUSValueW
PathCanonicalizeA
SHRegOpenUSKeyW
UrlCombineW
StrRChrW
StrCpyNW
StrChrA
PathCombineW
PathIsRootA
PathFindNextComponentW

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupScanFileQueueA
SetupLogErrorW
SetupDiGetDeviceInfoListDetailA
SetupDiSetDeviceInstallParamsW

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69ea414327d825d16a08dee4f1b09588

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

setupapi

Sections

.text Size: 332KB - Virtual size: 331KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 6KB

.text
Size: 332KB - Virtual size: 331KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 6KB