3d1d730b426986adabd6a2b69a1f8b7f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d1d730b426986adabd6a2b69a1f8b7f_JaffaCakes118
Size

804KB
MD5

3d1d730b426986adabd6a2b69a1f8b7f
SHA1

3e5a0be540207a24574fefb8e1ef1528618edbca
SHA256

584fd8deba2a8262a4e2faa2622b5b8fcfe5858acc8d82d0e7db7fbba5b807fd
SHA512

1b29df6999b7f7f4b46abc7d5ce1a7ad3e360cba58db020074c01e899ac13a5bf2ba6e76b1c6f0aaf908f7daff5a7f7dbba51d4231a67b2ffb5861d3558938c1
SSDEEP

24576:Bhf+cCRvIfrL4rVL8/ZC7ZiwaWXyRJtOHhdc3o:wRAfcY/Q7ZaWCRJsdc3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d1d730b426986adabd6a2b69a1f8b7f_JaffaCakes118

Files

3d1d730b426986adabd6a2b69a1f8b7f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8d67f8e28814c81bd9dbf4ed76136361

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetTimeZoneInformation
GlobalUnlock
GetSystemDefaultLangID
SetThreadLocale
WaitForMultipleObjects
GlobalLock
SetFilePointer
SetConsoleCtrlHandler
WriteConsoleInputA
WaitForSingleObject
VirtualFree
VirtualAlloc
SetFileApisToOEM
InterlockedExchange
GetLocaleInfoA
SetConsoleScreenBufferSize
InitializeCriticalSection
SetCurrentDirectoryA
GetConsoleCursorInfo
TlsGetValue
SetConsoleWindowInfo
GetVersion
GetTickCount
GetOEMCP
SetConsoleCursorPosition
GetLastError
SetEnvironmentVariableA
GetStringTypeA
CloseHandle
CreateFileA
TlsFree
GetDriveTypeA
GetModuleHandleA
WriteFile
GetCurrentDirectoryA
SetHandleCount
GetEnvironmentVariableA
ReleaseMutex
PeekConsoleInputA
GetLogicalDrives
GetLargestConsoleWindowSize
WideCharToMultiByte
GetVersionExA
GlobalAlloc
GetConsoleTitleA
FillConsoleOutputCharacterA
IsValidLocale
GetProcessHeap
SetLastError
FlushConsoleInputBuffer
FillConsoleOutputAttribute
GetProcAddress
GetACP
GetLocalTime
GetStringTypeW
SetConsoleTitleA
GetConsoleMode
GlobalMemoryStatus
ReadFile
GlobalFree
ExitProcess
UnhandledExceptionFilter
GetEnvironmentStrings
CreateMutexA
WriteConsoleOutputA
GetNumberOfConsoleInputEvents
ReadConsoleA
LeaveCriticalSection
GetCommandLineA
RtlUnwind
LoadLibraryA
GetCurrentThreadId
FileTimeToDosDateTime
SleepEx
GetConsoleScreenBufferInfo
GetFileType
TlsAlloc
VirtualQuery
GetUserDefaultLCID
GetModuleFileNameA
EnterCriticalSection
GlobalReAlloc
FindNextFileA
FindFirstFileA
GetStartupInfoA
ReadConsoleOutputA
GetFileAttributesA
FreeLibrary
DeleteCriticalSection
SetConsoleCursorInfo
TlsSetValue
HeapCreate
CreateThread
GetCPInfo
MultiByteToWideChar
GetStdHandle
FileTimeToLocalFileTime
GetFullPathNameA
RaiseException
LCMapStringA
HeapAlloc
GetVolumeInformationA
DeleteFileA
MoveFileA
FindClose
ReadConsoleInputA
Sleep
GetNumberOfConsoleMouseButtons
SetConsoleMode

user32

EmptyClipboard
IsIconic
IsWindow
CloseClipboard
MessageBeep
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
wsprintfA
ShowWindow
EnumThreadWindows
mouse_event
GetWindowRect
GetForegroundWindow
GetClipboardData
SetForegroundWindow
FindWindowA
MessageBoxA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA

shell32

ShellExecuteA

winmm

midiInAddBuffer
midiInClose
midiInGetErrorTextA
midiOutClose
midiDisconnect

rpcrt4

UuidCreate

secur32

CompleteAuthToken

Sections

.text
Size: 771KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bzz
Size: - Virtual size: 5.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d67f8e28814c81bd9dbf4ed76136361

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

winmm

rpcrt4

secur32

Sections

.text Size: 771KB - Virtual size: 770KB

.bzz Size: - Virtual size: 5.8MB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 771KB - Virtual size: 770KB

.bzz
Size: - Virtual size: 5.8MB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 5KB - Virtual size: 5KB