2cd0e68fc0df5619d3b72c47afe9a216_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2cd0e68fc0df5619d3b72c47afe9a216_JaffaCakes118
Size

148KB
MD5

2cd0e68fc0df5619d3b72c47afe9a216
SHA1

f76dbb7c2791a02a52313939f4a914f839b1ea02
SHA256

cae5eb09a42d42fdfbe9af401838a0f298391609c44dd84990c031b527676db6
SHA512

dc58eda26fd24c166d9ae8657a78c6c8e41ed3b8ffd4f192a9289e966e14d568d253088778c105847c7a754b1aa59ddd1f228198cf9193f801867fd8a77ade5b
SSDEEP

3072:HB0KosanGDhPRMas35lREp5qgz/rga7mMTy0BufbDPl:hX1Z0JlRWhga6MO3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd0e68fc0df5619d3b72c47afe9a216_JaffaCakes118

Files

2cd0e68fc0df5619d3b72c47afe9a216_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f00ed3a0c76171c85eb382735250d189

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
ReadFile
WriteFile
GetFileSize
SetEndOfFile
CloseHandle
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
FindFirstFileW
FindNextFileW
FindClose
lstrcmpiW
FileTimeToLocalFileTime
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateThread
GetCurrentThreadId
GetCurrentThread
ResumeThread
ExitThread
TerminateThread
FindResourceA
FindResourceW
LoadResource
SizeofResource
LockResource
FreeResource
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryA
LoadLibraryW
LoadLibraryExA
GetProcAddress
CreateMutexA
ReleaseMutex
OpenMutexA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetDateFormatA
lstrcmpA
GetCommandLineW
CreateProcessA
GetCurrentDirectoryA
CreateFileMappingA
RtlUnwind
GetPrivateProfileStringA
Sleep
IsBadReadPtr
GetSystemTime
InterlockedExchange
InterlockedDecrement
GetModuleFileNameA
GetCurrentProcessId
SetHandleCount
GetConsoleOutputCP
GetSystemDirectoryA
FlushFileBuffers
CreateEventA
SetEvent
ResetEvent
GetFileTime
CopyFileA
CreateFileA
GetStringTypeExA
VirtualFree
UnmapViewOfFile
MapViewOfFile
GetVersion
FindFirstFileA
FindNextFileA
GetFileType
IsBadCodePtr
DeleteFileW
GetFileAttributesW
GetEnvironmentVariableA
SetFileAttributesW
lstrlenA
DeleteFileA
QueryPerformanceCounter
IsBadWritePtr
TerminateProcess
LoadLibraryExW
WaitForMultipleObjects
VirtualAlloc
SetThreadPriority
GetExitCodeThread
GetTempPathA
lstrcmpiA
CreateDirectoryA
ExitProcess
CreateEventW
WriteConsoleA
VirtualQuery
GlobalLock
MultiByteToWideChar
GetLocaleInfoA
lstrcatA
LCMapStringA
GetExitCodeProcess
GetModuleHandleW
GetFileAttributesA
GetTickCount
CreateProcessW
EnumCalendarInfoA
GetCommandLineA
GetVersionExW
GetLastError
FreeEnvironmentStringsA
MoveFileA
CompareStringW
GetTempFileNameA
FileTimeToSystemTime
MulDiv
LCMapStringW
GetStartupInfoA
InterlockedIncrement
FileTimeToDosDateTime

msvcrt

__p__environ
memcmp
fgetpos
__badioinfo
strncpy
atexit
_lock
_mbsrchr
_ultoa
_iob
localtime
putchar
_CIsqrt
memmove
rewind
_ftol
isdigit
strcpy
gmtime
_getcwd
_itow
wcsncpy
_assert
wcstoul
realloc
clearerr
sqrt
_itoa
__CxxFrameHandler
tolower
_mkdir
wcscmp
wcstol
_exit
strchr
__initenv
_strdup
strcspn
_open_osfhandle
cos
wcsrchr
_snprintf
calloc
_CIpow
ceil
__mb_cur_max
swprintf
strspn
strtok
_cexit
_lseek
exit
_pctype
_wcslwr
_utime
_controlfp
atof
clock
strncat
fwrite
iswdigit
rand
isspace
_vsnwprintf
_umask
_c_exit
strlen
_vsnprintf
towupper
__lc_codepage
_getpid
strrchr
srand
ungetc
_read
pow
perror
localeconv
bsearch
wcstombs
rename
_mktemp
memset
_mbsicmp
_setjmp
_putenv
_getch
_open
__dllonexit
_beginthreadex
strcat
_wtol
wcscspn
__p___initenv
_chmod
wcsstr
_setjmp3
strcmp
_mbscmp
_fstat
_dup
atoi
_stat
_wtoi
_isatty
__p__fmode
wctomb
atol
_close
_strcmpi
strstr
__p__commode
_snwprintf
fprintf
wcsncmp
log
fputc
abort
_setmode
getenv
iswctype
_pipe
isxdigit
wcschr
_initterm
memcpy
fflush
longjmp
__set_app_type
sscanf
fgetc
_errno
strpbrk
_wcsicmp
__pioinfo
_wcsupr
__setusermatherr
_except_handler3
_flsbuf
_purecall
wcscat
_XcptFilter
_get_osfhandle
time
fseek
ctime
toupper
_wcsnicmp
puts
_strlwr
_dup2
fputs
_acmdln
_ismbblead
_fdopen
_fileno
fgets
fsetpos
_wfopen
strerror
wcslen
isleadbyte
_stricmp
strtoul
sprintf
fclose
ftell
_filelengthi64
_filbuf
fopen
__getmainargs
floor
_strnicmp
remove
sin
_unlink
strncmp
_unlock
iswspace
_fullpath
strtol
fread
memchr
_amsg_exit
malloc
_osver
setlocale
_lseeki64
_write
_kbhit
_isctype

user32

GetWindowRect
IsDialogMessageA
GetMessageA
GetCapture
GetClassNameA
GetScrollRange
ScrollWindow
GetTopWindow
DefWindowProcA
LoadBitmapA
GetPropA
SystemParametersInfoA
CharLowerA
MapWindowPoints
GetActiveWindow
GetWindowPlacement
RedrawWindow
RemovePropA
PtInRect
CloseClipboard
MessageBoxA
SendMessageA
GetDlgItem
PeekMessageA
SetMenu
WindowFromPoint
DrawIcon
SetScrollRange
IsChild
KillTimer
PostQuitMessage
DialogBoxParamA
GetSystemMenu
wsprintfA
GetDesktopWindow
GetWindow
IsWindow
EmptyClipboard
SetWindowLongA
GetMenuItemCount
InvalidateRect
GetForegroundWindow
DestroyCursor
InflateRect
WinHelpA
GetSubMenu
DrawFrameControl
DestroyWindow
OemToCharA
GetWindowTextA
CallNextHookEx
IsWindowVisible
MessageBeep
GetDCEx
SetScrollInfo
GetKeyboardType
IsIconic
EnumWindows
UnhookWindowsHookEx
CharNextA
ReleaseCapture
CallWindowProcA
EnableMenuItem
EndPaint
GetMenuState
LoadCursorA
SetTimer
CreateMenu
SetClassLongA
GetScrollInfo
GetMenu
DestroyIcon
SetPropA
DestroyMenu
FrameRect
SetScrollPos
GetDC
SetWindowsHookExA
OpenClipboard
DrawTextA
BeginPaint
GetLastActivePopup
DrawEdge
SetFocus
GetParent
ClientToScreen
RegisterClipboardFormatA
UpdateWindow
IntersectRect
InsertMenuItemA
ScreenToClient
SendDlgItemMessageA
UnregisterClassA
GetMenuStringA
SetClipboardData
GetScrollPos
PostMessageA
DispatchMessageA
SetWindowPos
GetWindowDC
WaitMessage
LoadStringA
SetForegroundWindow
GetClassInfoA
TrackPopupMenu
OffsetRect
EnumThreadWindows
SetWindowTextA
GetWindowThreadProcessId
GetClientRect
CreatePopupMenu
EndDialog
DrawIconEx
ReleaseDC
GetFocus
ShowWindow
RegisterClassA
SetActiveWindow
SetCursor
GetSysColorBrush
GetSystemMetrics
SetRect
GetSysColor
LoadIconA
GetMessagePos
IsRectEmpty
TranslateMessage
SetCapture
SetWindowPlacement
RemoveMenu
GetCursorPos
EqualRect
DeleteMenu
GetWindowLongA
InsertMenuA
GetMenuItemID
ShowOwnedPopups
IsWindowEnabled
CreateWindowExA
FillRect

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f00ed3a0c76171c85eb382735250d189

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 1KB - Virtual size: 4KB

.erdata Size: 1KB - Virtual size: 1KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 1KB - Virtual size: 4KB

.erdata
Size: 1KB - Virtual size: 1KB