2cdddf024e647be0cdac7cd106bb0dc0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2cdddf024e647be0cdac7cd106bb0dc0_JaffaCakes118
Size

50KB
MD5

2cdddf024e647be0cdac7cd106bb0dc0
SHA1

8bb6521469ed279b372db18ec59210355e6dbf87
SHA256

98c15fbb30a9f5b2304918b32875ba7c6e125c55493c00439b475c4897a548dd
SHA512

a40d583aa3fd70cf10524e1910d26b3140968bf5ed4b68adac19371fdb6eae3ba0717fc9552890bf1d237ca0c29382200e47abbff42b97ba9bacf6f7a09e0476
SSDEEP

768:EnOe8OE+goA2TwjCzbJEO1dIwd/cju65Rxcjx6BDxRryJfTkYtE/eMq:qOTOFDTwjUJJ1d7cjuKcjx6l0YYGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cdddf024e647be0cdac7cd106bb0dc0_JaffaCakes118

Files

2cdddf024e647be0cdac7cd106bb0dc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5ce3558998a6d2f61fa8e06d33dc1c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyExA
DeregisterEventSource
RegDeleteKeyA
InitializeSecurityDescriptor
RegCloseKey
RegDeleteValueA
RegSetValueExA
ReportEventA
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA

kernel32

GetExitCodeThread
SetEvent
GetFileAttributesA
TlsFree
MoveFileA
UnhandledExceptionFilter
CreateSemaphoreA
IsProcessorFeaturePresent
GetSystemInfo
ReleaseMutex
HeapCreate
GetProcessHeap
GetUserDefaultLangID
GetFileSize
FindNextFileA
SetFilePointer
CreateThread
lstrlenA
ReadFileEx
InterlockedIncrement
GlobalFree
OutputDebugStringA
DeleteFileA
lstrcmpA
GlobalMemoryStatus
WaitForSingleObjectEx
LoadLibraryA
HeapDestroy
SetEndOfFile
CreateMutexA
GetTickCount
TerminateProcess
DeleteCriticalSection
HeapFree
WriteFileEx
WaitForSingleObject
WaitForMultipleObjectsEx
CreateDirectoryA
TlsSetValue
GetCurrentThread
InitializeCriticalSection
FindClose
GetModuleHandleA
CloseHandle
MapViewOfFile
ReadFile
EnterCriticalSection
lstrcpyA
LCMapStringW
GetSystemDefaultLangID
GetLocalTime
FindFirstFileA
CopyFileA
ResetEvent
CreateFileA
GetDriveTypeA
IsValidLocale
VirtualQuery
SleepEx
CreateFileMappingA
ExpandEnvironmentStringsA
GetOverlappedResult
GetCurrentThreadId
Sleep
HeapAlloc
TlsAlloc
QueryPerformanceCounter
DebugBreak
CreateEventA
GetDiskFreeSpaceA
ReleaseSemaphore
TlsGetValue
LeaveCriticalSection
QueryPerformanceFrequency
FlushFileBuffers
UnmapViewOfFile
VirtualFree
GetCurrentProcess
GetLastError
GetProcAddress
FreeLibrary
WriteFile
GlobalAlloc
GetCurrentProcessId
GetModuleFileNameA
ReadProcessMemory
SetThreadPriority
VirtualAlloc
RemoveDirectoryA
GetVersionExA

winmm

auxSetVolume

msvcrt

_iob
strpbrk
_beep
malloc
_initterm
_makepath
_adjust_fdiv
_itoa
_stricmp
strtok
exit
_snprintf
fprintf
_ltoa
_splitpath
toupper
strncpy
vprintf
_ftol
atol
rand
swprintf
fclose
isprint
strchr
_beginthread
_strnicmp
time
sprintf
strtoul
memmove
vsprintf
printf
_vsnprintf
wcslen
_chdir
free
_purecall
_onexit
fflush
_ultoa
__dllonexit

Sections

.textbss
Size: 43KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5ce3558998a6d2f61fa8e06d33dc1c7

Headers

File Characteristics

Imports

advapi32

kernel32

winmm

msvcrt

Sections

.textbss Size: 43KB - Virtual size: 1.3MB

.text Size: 512B - Virtual size: 472B

.idata Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 4B

.textbss
Size: 43KB - Virtual size: 1.3MB

.text
Size: 512B - Virtual size: 472B

.idata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 4B