32cf98cbee2b1e6400f9d365809b9c3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32cf98cbee2b1e6400f9d365809b9c3b_JaffaCakes118
Size

525KB
MD5

32cf98cbee2b1e6400f9d365809b9c3b
SHA1

dae35f76a1580cdc98f32687dc4128cc60c320e9
SHA256

bb5b8c125632e2e7c2c5bd51f1879f544df4456c8bb9533a4ae8231712848cdc
SHA512

b383fec9a15be7354926afd0133408e1503182522c4e8d20fadb871b89d03310e5188b7fe0f4c7806e306fa15e98e6c1468dcb0ece3ca6bc0aa21f88201b736e
SSDEEP

12288:nvzGIgT4zSR2/oViyhJ0dnNpS30V1C9AqgmJuv0:SIO4zSk/OLhJI60V1C93Kv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32cf98cbee2b1e6400f9d365809b9c3b_JaffaCakes118

Files

32cf98cbee2b1e6400f9d365809b9c3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae0c4cbc5fa62bf2acc572a386857f3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

kernel32

TerminateThread
ReadFile
OutputDebugStringW
SetEndOfFile
WaitForSingleObject
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
LoadLibraryA
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEvent
WaitForMultipleObjects
FindAtomA
GetLocalTime
GetCurrentThreadId
FreeEnvironmentStringsA

user32

GetKeyState
IsWindow
CreateIconIndirect
GetDC
ReleaseDC
KillTimer
PostMessageW
GetClientRect

gdi32

BitBlt
GetDIBits
ResetDCW
PlayEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
StretchBlt
SelectPalette
CreateHalftonePalette
GetDIBColorTable
DPtoLP
SetDIBitsToDevice
GetStockObject
CreateSolidBrush
GetNearestPaletteIndex
CreatePalette
StretchDIBits
SetStretchBltMode
CreateCompatibleBitmap
DeleteDC
SelectObject
SetBitmapBits
CreateBitmap
CreateCompatibleDC
GetFontData
DeleteObject
GetDeviceCaps

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

comdlg32

PrintDlgW

winmm

timeKillEvent
waveOutWrite
waveOutUnprepareHeader
waveOutPause
waveOutReset
waveOutClose
waveOutOpen
waveOutPrepareHeader
timeSetEvent

ws2_32

WSARecv
WSAResetEvent
WSAGetOverlappedResult
WSASend
WSAAccept
WSACloseEvent
WSAWaitForMultipleEvents
WSAEventSelect
WSACreateEvent
WSASendTo
WSASocketW
WSAEnumNetworkEvents

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae0c4cbc5fa62bf2acc572a386857f3d

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

gdiplus

comdlg32

winmm

ws2_32

advapi32

Sections

.text Size: 296KB - Virtual size: 295KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 140KB - Virtual size: 473KB

.rsrc Size: 85KB - Virtual size: 88KB

.text
Size: 296KB - Virtual size: 295KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 140KB - Virtual size: 473KB

.rsrc
Size: 85KB - Virtual size: 88KB