3b6c4e6efcec55dc65281c32d4ed035c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b6c4e6efcec55dc65281c32d4ed035c_JaffaCakes118
Size

213KB
MD5

3b6c4e6efcec55dc65281c32d4ed035c
SHA1

8a35d95ce36117c6734e4dc41d5cd258388a0e2e
SHA256

fe7035c04f5e74b882c519e7a6055b426f2832e056b7231ae60568730f1e63ce
SHA512

1532dbe81bc00e9ac7e496274ea361f23342fd64a9b4acdf904bd4e4331708ce1ddace333609710d36deb454aa6ed1a2f116198dae233d6dd442bc76a321fad4
SSDEEP

6144:n2c3jJxGERkD+TtoHjWGBVZU7h1WyUTEn:2czKEK+GLS7XWDTEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6c4e6efcec55dc65281c32d4ed035c_JaffaCakes118

Files

3b6c4e6efcec55dc65281c32d4ed035c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

eb6d6549d6624880d5d99d1d8b85f13f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetCPInfo
GlobalAddAtomA
lstrlenW
InterlockedIncrement
GetConsoleCP
TlsGetValue
RaiseException
FreeEnvironmentStringsA
IsBadStringPtrA
RtlUnwind
GetProcessWorkingSetSize
lstrcpyA
GetVersionExA
GetExitCodeThread
TlsFree
GetOEMCP
CreateThread
GetConsoleOutputCP
CreateFileMappingA
WideCharToMultiByte
GetStdHandle
GetConsoleMode
WriteConsoleA
GetComputerNameW
WaitForSingleObject
TerminateThread
GetCurrentThread
GetCommandLineW
GetModuleHandleA
SetEvent
GetCurrentProcess
IsValidCodePage
ExpandEnvironmentStringsA
MultiByteToWideChar
IsDebuggerPresent
UnhandledExceptionFilter
LoadResource
GlobalUnlock
SetEndOfFile
DeleteCriticalSection
ExitThread
GetNumberFormatA
VirtualAlloc
WriteConsoleW
Sleep
FormatMessageA
FindClose
PulseEvent
SetErrorMode
SetFilePointer
DeviceIoControl
LCMapStringA
GetFileAttributesA
CloseHandle
DeleteFileA
LocalAlloc
GlobalReAlloc
VirtualQueryEx
FreeEnvironmentStringsW
lstrcatA
QueryPerformanceCounter
lstrcpynA
HeapCreate
HeapSize
GetVersion
HeapAlloc
SetThreadAffinityMask
QueryPerformanceFrequency
GetStartupInfoA

msvcrt

_ismbcl2
raise
_ismbbprint
_beginthread
isgraph
_strset
srand
_dup2
_wrmdir
exit
_ctime64
tolower
gmtime
strcmp
asctime
_strrev
_adjust_fdiv
_XcptFilter
_stat64
_wtempnam
atoi
_wopen
_logb
_read
_wsystem
_chmod
_chkesp
_wcsicmp
wcscpy
iswlower
getchar
__getmainargs
_ismbbpunct
tan
_mbslwr
_filelength
_makepath
_ismbclower
_strupr
_ismbckata
_strtime
_setsystime
_inpd
_flushall
vfprintf
_stat
sprintf
fputc
_mbsnbset
_mbsset
_except_handler3
_mbsncoll
fclose
swprintf
_cwprintf
__setusermatherr
_lsearch
_snscanf
_rotr
iswdigit
ctime
swscanf
_mbsnicoll
_wchmod
_controlfp
fputws
wcscoll
wcsftime
__p__fmode
clock
_cputws
ungetc
_ismbclegal
cos
_winminor
isleadbyte
_acmdln
atexit
_wcsrev
__p__commode
isxdigit
_global_unwind2
_spawnlpe
_setmode
_ismbbkana
memcpy
_unloaddll
_exit
__set_app_type
_wtoi
_cgets
localeconv
_ismbbkprint
_putch
ldiv
_ismbcgraph
_atoi64
_wexecve
_initterm

user32

BeginDeferWindowPos
DrawFrameControl
GetDoubleClickTime
DestroyIcon
DefFrameProcA
GetMessageA
GetUserObjectSecurity
ScrollWindowEx
CloseClipboard
PostQuitMessage
GetFocus
TranslateAcceleratorA
GetSubMenu
ShowWindow
GetWindowLongA
SetCursor
GetSystemMetrics
DeferWindowPos
EndDeferWindowPos
WindowFromPoint
SetTimer
CheckMenuRadioItem
DefWindowProcA
LoadAcceleratorsA
LoadMenuA
GetSysColorBrush
RegisterClassExA
SetFocus
PeekMessageA
SystemParametersInfoA
CreateIconIndirect
GetWindowPlacement
GetParent
UnionRect
SetWindowPlacement
CheckRadioButton
PtInRect
CreateDialogParamA
GetMenuItemCount
CreateWindowExA
EnableMenuItem
DispatchMessageA
KillTimer
MapWindowPoints
CopyRect
IsZoomed
MsgWaitForMultipleObjects
UpdateWindow
CheckMenuItem
SetWindowTextA
GetKeyState
BeginPaint
SetClipboardData
IsWindowVisible
CallWindowProcA
LoadStringA
OffsetRect
SetScrollInfo
GetSysColor
ReleaseCapture
SetDlgItemTextA
IsIconic
EnableWindow
FindWindowA
DrawIconEx
MoveWindow
CreatePopupMenu
IntersectRect
LoadImageA

gdi32

StartPage
SaveDC
Polyline
SelectClipRgn
CreatePen
EndDoc
CreateCompatibleDC
GetTextExtentPoint32A
ExtTextOutA
GetObjectA
SetBkMode
SetTextColor
SelectObject
SetROP2
SetTextAlign
CreateCompatibleBitmap
CreateFontIndirectA
CreateRectRgnIndirect
CreateDIBSection
RectInRegion
LineTo
SetMapMode
Rectangle
GetDeviceCaps
GetStockObject
RestoreDC
GetTextMetricsA
GetBkColor
EndPage
BitBlt
GetBkMode
MoveToEx
CreateRectRgn
CreateSolidBrush
DeleteObject
DeleteDC

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb6d6549d6624880d5d99d1d8b85f13f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 183KB - Virtual size: 183KB

.data Size: 512B - Virtual size: 165B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 183KB - Virtual size: 183KB

.data
Size: 512B - Virtual size: 165B

.rsrc
Size: 512B - Virtual size: 4B