2c1ae61860d11dccbb568c7c99ad2cfe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c1ae61860d11dccbb568c7c99ad2cfe_JaffaCakes118
Size

127KB
MD5

2c1ae61860d11dccbb568c7c99ad2cfe
SHA1

9eb084016d4df0420ef81dd14dce6b7d31004c91
SHA256

15e01e1ebf89d529868ef2ca3da4fa1706542cb02f79cb691913eb8c507d4336
SHA512

396e3335765ba6542412fb686987636a4f66c9bc78c3befc021ab5d9d0f23dff9c5a623fe51edd857a1a36fb8c9e79f8023f3e9bd50fef71491725bac6225524
SSDEEP

3072:T19ItEKf2ESzbbO5qweeb1R1nG2M6imdnYZ+S3rq:Tepf2Ru57ekHZG2zDQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c1ae61860d11dccbb568c7c99ad2cfe_JaffaCakes118

Files

2c1ae61860d11dccbb568c7c99ad2cfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc0e302eb8b5f920f7599a22d3f7dad1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeEnvironmentStringsW
GetVersionExA
InterlockedDecrement
GetLocaleInfoA
EndUpdateResourceA
GetProcAddress
LoadLibraryA
CreateThread
lstrcmpiW
WriteFile
GetModuleHandleW
FormatMessageA
HeapFree
TerminateProcess
GetOEMCP
GetLocalTime
GlobalFree
GlobalLock
GetLastError
GlobalUnlock
GetModuleHandleA

msvcrt

atoi
wcslen
swprintf
isleadbyte
wcscat
memset
__set_app_type
memcpy
free
__dllonexit
wcscmp
_vsnprintf
iswalnum
wcstok
_wcsicmp
isdigit
_acmdln
isspace
strchr
iscntrl
wcstol
_wtol
fclose
__getmainargs
_adjust_fdiv

user32

MessageBeep
RegisterShellHookWindow
EndDialog
CopyRect
DrawIconEx
GetMenu
AppendMenuW
DrawTextW
GetWindowLongA
IsDlgButtonChecked
GetMessageA
FrameRect
IsWindowVisible
DefWindowProcW
FindWindowW
LoadStringW
SetWindowTextW
DrawEdge
LoadStringA
OemToCharW
PeekMessageW
RedrawWindow
CharUpperW
LoadMenuA
SetScrollPos
SystemParametersInfoA

gdi32

ExtTextOutW
GetTextExtentPointW
CreatePalette
TranslateCharsetInfo
GetTextExtentPoint32W
Rectangle
GetTextMetricsW
PatBlt
CreateSolidBrush
SetBkColor
CreateCompatibleDC
LineTo
DeleteObject
StretchBlt
MoveToEx
CreateFontIndirectW

tapi32

lineConfigDialogEdit
lineGetDevConfigW
lineCreateAgentSessionW
phoneGetButtonInfo
lineGetAddressCaps
lineSetAgentStateEx
lineDrop
phoneGetMessage

comdlg32

GetOpenFileNameW

shell32

ShellAboutW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderLocation

winmm

mixerGetLineInfoA
auxOutMessage
mmGetCurrentTask
mmioDescend

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

nes1
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

nes2
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

nes3
Size: 512B - Virtual size: 401B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nes4
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc0e302eb8b5f920f7599a22d3f7dad1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

tapi32

comdlg32

shell32

winmm

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

nes1 Size: 512B - Virtual size: 278B

nes2 Size: 512B - Virtual size: 360B

nes3 Size: 512B - Virtual size: 401B

nes4 Size: 512B - Virtual size: 306B

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 110KB - Virtual size: 109KB

.reloc Size: 512B - Virtual size: 76B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

nes1
Size: 512B - Virtual size: 278B

nes2
Size: 512B - Virtual size: 360B

nes3
Size: 512B - Virtual size: 401B

nes4
Size: 512B - Virtual size: 306B

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 110KB - Virtual size: 109KB

.reloc
Size: 512B - Virtual size: 76B