2fe0413b915a21d407b1e82a61b19df2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2fe0413b915a21d407b1e82a61b19df2_JaffaCakes118
Size

257KB
MD5

2fe0413b915a21d407b1e82a61b19df2
SHA1

95639974ad79da82ea5c9753cecf90402f8d2a4c
SHA256

94d9337359ce46b8bf23209f22a481236505fc1222610716fd38151626b55263
SHA512

b778e4a667d696b8b4cf03fdd228313d05e96c633dd28d598a332a9a8c4e7fb1784bd643e2052b221a11cbb6a6864a4e87a983e8474b5d4bd21147c92a255ab6
SSDEEP

6144:J1Co6nZJbHLtERqwV3wZK2x7sLK1uTtvoyc2Yt:JCXbHLDwV3wZV7sLKqtQn2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe0413b915a21d407b1e82a61b19df2_JaffaCakes118

Files

2fe0413b915a21d407b1e82a61b19df2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
FreeLibrary
GetTimeFormatW
WaitForSingleObject
SystemTimeToFileTime
GetDateFormatW
lstrcpynW
GetModuleHandleW
lstrlenW
lstrlenA
SetErrorMode
CreateDirectoryW
GetSystemDirectoryW
FileTimeToSystemTime
GetWindowsDirectoryW
LocalFree
GetTempPathW
LocalAlloc
RemoveDirectoryW
OpenEventW
SetUnhandledExceptionFilter
IsDebuggerPresent
ExpandEnvironmentStringsA
CreateEventW
lstrcmpW
CompareFileTime
lstrcmpiW
FindResourceW
LoadResource
GetCurrentThreadId
LoadLibraryA
GetProcAddress

user32

GetFocus
EnableMenuItem
DestroyIcon
LoadCursorW
GetSysColor
GetSubMenu
RemoveMenu
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
GetMenuItemCount
AppendMenuW
LoadBitmapW
SetWindowPos
GetDesktopWindow
CopyRect
GetMenuItemInfoW
FindWindowW
EnableWindow
SendMessageW
GetSystemMetrics
IsWindow
SetTimer
InvalidateRect
GetCursorPos
RegisterWindowMessageW
GetForegroundWindow

gdi32

CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreateDIBSection
CreateHatchBrush
CreateRectRgn
DeleteObject
CreatePatternBrush
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

wininet

HttpQueryInfoW
InternetCloseHandle
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetAttemptConnect
InternetReadFile

shell32

ShellExecuteW

comctl32

ImageList_GetIconSize

quartz

AMGetErrorTextW
DBToAmpFactor

cic

DllUnregisterServer

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itfHg
Size: 3KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUmTd
Size: 512B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bpg
Size: 4KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cX
Size: 3KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qaI
Size: 1KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cLEXDA
Size: 75KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bMpgq
Size: 1024B - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cTzOE
Size: 139KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Abr
Size: 512B - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32f370b67c63baf0129aee4d104de204

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

shell32

comctl32

quartz

cic

Sections

.text Size: 15KB - Virtual size: 15KB

.itfHg Size: 3KB - Virtual size: 542KB

.RUmTd Size: 512B - Virtual size: 37KB

.Bpg Size: 4KB - Virtual size: 170KB

.rdata Size: 3KB - Virtual size: 46KB

.cX Size: 3KB - Virtual size: 385KB

.qaI Size: 1KB - Virtual size: 210KB

.cLEXDA Size: 75KB - Virtual size: 118KB

.bMpgq Size: 1024B - Virtual size: 45KB

.M Size: 1KB - Virtual size: 7KB

.data Size: 6KB - Virtual size: 284KB

.cTzOE Size: 139KB - Virtual size: 193KB

.Abr Size: 512B - Virtual size: 86KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.itfHg
Size: 3KB - Virtual size: 542KB

.RUmTd
Size: 512B - Virtual size: 37KB

.Bpg
Size: 4KB - Virtual size: 170KB

.rdata
Size: 3KB - Virtual size: 46KB

.cX
Size: 3KB - Virtual size: 385KB

.qaI
Size: 1KB - Virtual size: 210KB

.cLEXDA
Size: 75KB - Virtual size: 118KB

.bMpgq
Size: 1024B - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 7KB

.data
Size: 6KB - Virtual size: 284KB

.cTzOE
Size: 139KB - Virtual size: 193KB

.Abr
Size: 512B - Virtual size: 86KB

.rsrc
Size: 1KB - Virtual size: 1KB