2e8bd5adf4398b5efc25f3ad090dec4e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e8bd5adf4398b5efc25f3ad090dec4e_JaffaCakes118
Size

744KB
MD5

2e8bd5adf4398b5efc25f3ad090dec4e
SHA1

ca4b835e3e661b207802f89d320f786ccae4180d
SHA256

f8968219ff4045dcbab202de53577a4dfd07d9b798a1288cf9eee08124ba3cec
SHA512

90f908a7244b5c5062a35a09ce04256fc89365b40ba680266ca69814a7b408166b8a610ee52d9c49c16b1483ea8e23dc7adcb1f19ba29f5ee5838bcea46e3f24
SSDEEP

12288:xmHpS0oB3uL/1tEjci7zbO9paHQrKiUQWyx9GfB75f1YJcqj/9zNjh5wdSCcmxsb:xCpHoNuznEVyQHrZQtx9uVf2JnjOlxh+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8bd5adf4398b5efc25f3ad090dec4e_JaffaCakes118

Files

2e8bd5adf4398b5efc25f3ad090dec4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac48297797cb1a520705072bc2a40938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeClientTransaction
SetWindowWord
MessageBoxW
DdeAccessData
SetScrollInfo
GetKeyboardType
UnpackDDElParam
DdeConnect
SendNotifyMessageW
GetUserObjectInformationW
DrawTextA
GetClipboardFormatNameA
DefWindowProcA
DrawTextExW
WaitMessage
DdeDisconnectList
ShowWindow
ScrollDC
EnumDisplaySettingsExA
GetGuiResources
GetClassInfoA
DdeSetUserHandle
SetLastErrorEx
CloseClipboard
IsCharUpperA
SetMenuItemInfoA
CreateWindowExA
DdeImpersonateClient
RegisterClassA
HideCaret
DestroyWindow
DdePostAdvise
GetListBoxInfo
GetMenuItemCount
CascadeChildWindows
SetCapture
MonitorFromWindow
BlockInput
MessageBoxA
GetTabbedTextExtentA
ShowWindowAsync
RegisterClassExA
SetForegroundWindow
GetKeyboardState
SetWindowPos

advapi32

CryptGetKeyParam
RegSaveKeyA
CryptSetHashParam
LookupSecurityDescriptorPartsA
RegOpenKeyW

wininet

InternetTimeToSystemTimeW
InternetQueryOptionA
FtpRenameFileW
InternetFortezzaCommand
InternetLockRequestFile
InternetCombineUrlA
InternetAttemptConnect

comctl32

ImageList_LoadImageA
CreatePropertySheetPageA
InitCommonControlsEx
ImageList_DrawIndirect
DrawStatusTextA
ImageList_GetBkColor

kernel32

GetCurrentProcessId
GetOEMCP
RtlUnwind
SetConsoleTextAttribute
IsBadReadPtr
FreeEnvironmentStringsA
WideCharToMultiByte
FindNextFileW
IsValidLocale
ExitProcess
CreateMutexA
GetEnvironmentStringsW
OutputDebugStringA
EnumResourceNamesA
UnhandledExceptionFilter
HeapReAlloc
InterlockedExchange
WaitForDebugEvent
GetFileAttributesA
LeaveCriticalSection
SetEnvironmentVariableA
VirtualFree
lstrcmpi
IsValidCodePage
GetCurrentThread
QueryPerformanceCounter
TerminateProcess
HeapDestroy
GlobalUnfix
GetModuleHandleA
VirtualQuery
WaitForMultipleObjectsEx
GetProfileIntA
GetExitCodeThread
GetLastError
GetUserDefaultLCID
SetHandleCount
MoveFileExW
WaitCommEvent
GetStringTypeA
GlobalHandle
LoadLibraryExW
WaitNamedPipeA
DebugBreak
HeapFree
VirtualAlloc
GetTimeZoneInformation
DebugActiveProcess
AddAtomA
GetDateFormatA
LCMapStringA
InterlockedIncrement
OpenWaitableTimerA
GetACP
SetLocaleInfoW
GetCurrentProcess
TlsFree
SetConsoleCtrlHandler
GetStringTypeW
EnumSystemLocalesA
GetTimeFormatA
GetSystemTimeAsFileTime
GetPrivateProfileSectionNamesA
GetCPInfo
FlushFileBuffers
WriteConsoleInputA
DeleteFiber
AllocConsole
OpenMutexW
GetEnvironmentStrings
GetProfileIntW
GetFileSize
OpenMutexA
lstrlenA
SetThreadIdealProcessor
DeleteCriticalSection
EnumResourceNamesW
GetSystemInfo
EnterCriticalSection
InterlockedDecrement
GetThreadTimes
GetCurrentThreadId
SetFilePointer
GetLocaleInfoW
TlsSetValue
RtlFillMemory
GetTempPathW
lstrcmpiA
HeapCreate
GetProcAddress
HeapAlloc
GetCommandLineA
GetSystemDirectoryA
MultiByteToWideChar
TransactNamedPipe
CreateMailslotW
CompareStringW
lstrcatW
LocalAlloc
TlsAlloc
SuspendThread
VirtualFreeEx
FreeEnvironmentStringsW
GetStdHandle
GetCommandLineW
TlsGetValue
GetTickCount
SetThreadAffinityMask
ReadFile
SetLastError
CreateDirectoryA
LockResource
GetVersionExA
ReleaseSemaphore
GetLocaleInfoA
SetVolumeLabelW
OutputDebugStringW
GetComputerNameA
SetCurrentDirectoryA
GetModuleFileNameA
SetPriorityClass
CompareStringA
GetCalendarInfoA
LoadLibraryA
GetStartupInfoA
GetNamedPipeHandleStateA
GetFileType
SetStdHandle
IsBadWritePtr
RemoveDirectoryW
OpenEventA
GetLongPathNameA
InitializeCriticalSection
GetPrivateProfileSectionA
HeapValidate
WriteFile
VirtualProtect
EnumDateFormatsExA
CloseHandle
CreateProcessW
GetConsoleScreenBufferInfo
SetUnhandledExceptionFilter
LCMapStringW

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac48297797cb1a520705072bc2a40938

Headers

File Characteristics

Imports

user32

advapi32

wininet

comctl32

kernel32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 452KB - Virtual size: 448KB

.data Size: 136KB - Virtual size: 165KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 452KB - Virtual size: 448KB

.data
Size: 136KB - Virtual size: 165KB

.rsrc
Size: 28KB - Virtual size: 27KB