2c0871692f8d5d0c96501bfa98175b8f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c0871692f8d5d0c96501bfa98175b8f_JaffaCakes118
Size

301KB
MD5

2c0871692f8d5d0c96501bfa98175b8f
SHA1

bd510f7807142a00e8b3ef39fa79f79743217fc1
SHA256

e3c93ea59f33a4a7e93ee6435224e8941a323448a2f6be3e3dbe81d27f0d5414
SHA512

53df46e6733345f53f0d8d26cd216f2c84b8c32df509a2f751d72f4ce268caade6f4a289230e5e0be661389cf73e8b8a332bbeebf4dea8070a5142e8ed3daa43
SSDEEP

6144:9RDj6wZJnCxnmyx81Q9zP3/p3AG4epuoedihc2Po:9cwLnln1OuGbpuoedSc2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c0871692f8d5d0c96501bfa98175b8f_JaffaCakes118

Files

2c0871692f8d5d0c96501bfa98175b8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

111cac7f2a3a7b4fae79f98a887629d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

wininet

DeleteUrlCacheEntryA
InternetCreateUrlA
InternetAlgIdToStringA
SetUrlCacheHeaderData
GopherGetAttributeA
FindFirstUrlCacheEntryExW

comdlg32

PageSetupDlgA
PrintDlgW
GetFileTitleW
FindTextA

kernel32

CreateDirectoryA
GetACP
TerminateProcess
HeapReAlloc
VirtualQuery
GetVersionExA
GetOEMCP
InitializeCriticalSection
GetProcessHeap
GetEnvironmentStringsW
SetEvent
SetFilePointer
IsValidCodePage
lstrlenA
SetStdHandle
VirtualFree
SetCriticalSectionSpinCount
CompareStringW
RtlMoveMemory
GetCurrentThread
MultiByteToWideChar
ReadConsoleW
GetModuleFileNameA
OpenMutexA
GetLocaleInfoA
TlsSetValue
CompareStringA
GetCurrentProcess
HeapSize
CreateMutexA
GetTickCount
GetCommandLineA
IsBadWritePtr
GetStartupInfoA
GetVolumeInformationA
HeapDestroy
EnumSystemLocalesA
QueryPerformanceCounter
GetProfileStringW
GetStringTypeW
RtlUnwind
GetFileType
LCMapStringA
SystemTimeToTzSpecificLocalTime
ReadFile
GetCurrentProcessId
GetProcessShutdownParameters
CloseHandle
LCMapStringW
GetUserDefaultLCID
GetCPInfo
GetLocalTime
TlsGetValue
HeapAlloc
GetTimeZoneInformation
GetModuleHandleA
VirtualAlloc
GetCurrentThreadId
FreeEnvironmentStringsA
DebugBreak
ExpandEnvironmentStringsA
SetEnvironmentVariableA
EnterCriticalSection
GetComputerNameW
GetProcAddress
GetLastError
LoadLibraryA
UnhandledExceptionFilter
FlushFileBuffers
TlsAlloc
WideCharToMultiByte
RtlFillMemory
SetHandleCount
FreeEnvironmentStringsW
LeaveCriticalSection
WriteFile
IsValidLocale
GetStringTypeA
HeapLock
GetDateFormatA
CreateNamedPipeA
VirtualProtect
GetSystemInfo
FileTimeToDosDateTime
GetEnvironmentStrings
TlsFree
GetStdHandle
HeapFree
DeleteCriticalSection
HeapCreate
GetLocaleInfoW
SetLastError
GetTimeFormatA
ExitProcess
GetSystemTimeAsFileTime
InterlockedExchange

user32

GetCapture
ScreenToClient
VkKeyScanA
CharToOemBuffW
GetUserObjectInformationW
CharUpperBuffW
GetWindowRect
DialogBoxParamA
RegisterClassA
GetWindowWord
GetMenuItemCount
ChangeDisplaySettingsExA
DefFrameProcW
RegisterClassExA
UnregisterDeviceNotification
ChangeMenuA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

111cac7f2a3a7b4fae79f98a887629d7

Headers

File Characteristics

Imports

comctl32

wininet

comdlg32

kernel32

user32

Sections

.text Size: 138KB - Virtual size: 137KB

.rdata Size: 8KB - Virtual size: 20KB

.data Size: 146KB - Virtual size: 145KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 8KB - Virtual size: 20KB

.data
Size: 146KB - Virtual size: 145KB

.rsrc
Size: 8KB - Virtual size: 7KB