2ed1f6da6978710a6b3882bd92e7e757_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2ed1f6da6978710a6b3882bd92e7e757_JaffaCakes118
Size

400KB
MD5

2ed1f6da6978710a6b3882bd92e7e757
SHA1

f70f2b6acb4012b29f943b44ba2cf835c7931f29
SHA256

f37322e24f2dbb78095a7989662e5b96a7860232ef80d4ac0d04f2f5beeab56a
SHA512

04d45ee1a0a314bbe117b3e4008085df6d95920b2311c8b0ab8f14ce6fe649feb87c9e479b70de5ff3bff678941934893b8403affd29dd250e4874218de21c63
SSDEEP

6144:zShYDRkRoWl5F07puzWNq3VTfGjQ06OnqrTQyyQ2Vb:zSs+oWl3IuiNehwQ09YTib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed1f6da6978710a6b3882bd92e7e757_JaffaCakes118

Files

2ed1f6da6978710a6b3882bd92e7e757_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8a0ad123972f8430d8568360092530d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
CreateFileMappingA
LocalHandle
CreateWaitableTimerA
UnhandledExceptionFilter
HeapFree
LocalFree
SetConsoleOutputCP
GetCurrentProcess
HeapAlloc
GetStartupInfoA
EnterCriticalSection
VirtualAlloc
DebugBreak
GetLocaleInfoA
InterlockedExchange
TlsFree
GlobalFix
lstrcpy
LoadLibraryA
GetUserDefaultLCID
FillConsoleOutputCharacterA
GetFullPathNameW
HeapValidate
CompareStringA
SetStdHandle
SetEnvironmentVariableW
InitializeCriticalSection
GetEnvironmentVariableW
TerminateProcess
FreeEnvironmentStringsW
GetCompressedFileSizeW
GetEnvironmentStringsW
LCMapStringA
GetLocaleInfoW
ReleaseMutex
lstrlenA
GetProcAddress
GetDateFormatA
GetEnvironmentVariableA
ExitProcess
TlsSetValue
HeapReAlloc
GetNamedPipeInfo
LoadLibraryExW
SetLastError
IsDebuggerPresent
LocalShrink
VirtualProtect
GetModuleHandleA
GetOEMCP
lstrcat
GetACP
WriteFile
GetPriorityClass
GetStdHandle
InterlockedIncrement
FreeEnvironmentStringsA
GetTimeZoneInformation
RtlUnwind
MultiByteToWideChar
GetCurrentThreadId
HeapDestroy
SetPriorityClass
GetSystemInfo
TlsAlloc
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
OpenMutexA
IsBadReadPtr
FlushFileBuffers
LCMapStringW
WideCharToMultiByte
SetConsoleCtrlHandler
GetCommandLineA
GetStringTypeA
DuplicateHandle
QueryPerformanceCounter
CloseHandle
CreateSemaphoreA
GetWindowsDirectoryW
CreateEventW
GetTickCount
GetLastError
GetStringTypeW
VirtualFree
InterlockedDecrement
GetFileType
lstrcpyA
GetStringTypeExA
SetEndOfFile
GetSystemTimeAsFileTime
IsValidCodePage
GetModuleFileNameA
GetCurrentDirectoryW
SetFilePointer
EnumDateFormatsW
IsBadWritePtr
GetTimeFormatA
CreateEventA
ReadConsoleOutputCharacterA
HeapLock
SleepEx
GetEnvironmentStrings
TlsGetValue
CompareStringW
SetHandleCount
GetCalendarInfoA
SetSystemTime
CreateMutexA
SetEnvironmentVariableA
GetCurrentProcessId
IsValidLocale
ReadFile
GetCPInfo
LeaveCriticalSection
GetVersionExW
VirtualQuery
HeapCreate
EnumCalendarInfoExW
GetProcessHeaps
WaitForDebugEvent
GetCurrentThread

comctl32

DrawInsert
DrawStatusText
ImageList_DrawIndirect
ImageList_Copy
CreateToolbar
ImageList_SetFlags
ImageList_ReplaceIcon
ImageList_AddIcon
_TrackMouseEvent
CreateToolbarEx
ImageList_Duplicate
CreateStatusWindowA
CreatePropertySheetPage
InitCommonControlsEx
ImageList_Draw
CreateUpDownControl
InitMUILanguage
ImageList_DragShowNolock
ImageList_SetIconSize
ImageList_DrawEx
ImageList_GetFlags

shell32

RealShellExecuteExW
SHAddToRecentDocs
SHGetSettings
RealShellExecuteA

gdi32

GetCharacterPlacementW
SetWinMetaFileBits
GetObjectW
PolyPolyline
AbortPath
LPtoDP
DeleteDC
GetCharacterPlacementA
CreateDCW
GetBitmapDimensionEx
GetArcDirection
PatBlt
GetOutlineTextMetricsW
CreateICA
BeginPath
GetAspectRatioFilterEx
CreateEnhMetaFileW
GetDeviceCaps
FillRgn
CreateFontW
PolyDraw
GetTextAlign
GetCharWidth32A

comdlg32

FindTextW
ReplaceTextW
PrintDlgA

user32

MonitorFromRect
MapVirtualKeyExA
DrawMenuBar
GetTitleBarInfo
DestroyMenu
CreateDialogParamA
ReleaseDC
GetWindowModuleFileNameA
LoadMenuA
wsprintfA
IsWindowEnabled
GetCaretBlinkTime
GetKeyboardState
OpenInputDesktop
SetWindowRgn
OpenDesktopA
RealChildWindowFromPoint
GetScrollRange
SendMessageW
VkKeyScanA
RegisterClassA
RegisterClassExA
SetDlgItemTextA
CopyRect
SwapMouseButton
CreateAcceleratorTableW
GetWindowWord
DialogBoxParamA
SetRect

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8a0ad123972f8430d8568360092530d

Headers

File Characteristics

Imports

kernel32

comctl32

shell32

gdi32

comdlg32

user32

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 92KB - Virtual size: 100KB

.rsrc Size: 112KB - Virtual size: 108KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 92KB - Virtual size: 100KB

.rsrc
Size: 112KB - Virtual size: 108KB