403841b680f7e9d0de953ce52c7bd2f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

403841b680f7e9d0de953ce52c7bd2f3_JaffaCakes118
Size

519KB
MD5

403841b680f7e9d0de953ce52c7bd2f3
SHA1

b87af9116a30c9752ff8a13f5a3574ac0f49948b
SHA256

2ef700c29a534efb02a22ca9c191e32257e7fd9bbcfef9adb7a0ee10786650ff
SHA512

0236af68313b2d106d5283d077136dbfa14949f3f416cf529595f67492fc43d613a06faaac328b8b9bc56b23fe4b80c3c21756cdbecca1e55072d8b3c9bc1b9e
SSDEEP

12288:3EzMjqFk2JlG/0kNN3iB/jLB2iuj+tMxoF3yr6:3EhuZ3ihAgOo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403841b680f7e9d0de953ce52c7bd2f3_JaffaCakes118

Files

403841b680f7e9d0de953ce52c7bd2f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc69966b7ea701a0d8cd400bf41316db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateDCA
CreateICW
GetEnhMetaFileBits
UpdateICMRegKeyA
GetBoundsRect
GetGlyphOutlineW
DeleteDC
EndPath
PlayMetaFileRecord
CloseMetaFile
CopyMetaFileW
GetWorldTransform
RectInRegion
GetSystemPaletteUse
CreateEllipticRgn
GetBkColor
PlayEnhMetaFile
GetTextExtentExPointW
GetDeviceCaps
PolyBezierTo
GetArcDirection

comctl32

ImageList_Write
ImageList_GetDragImage
ImageList_Destroy
ImageList_LoadImageA
CreatePropertySheetPage
DrawStatusTextW
InitMUILanguage
CreateToolbar
DrawStatusTextA
ImageList_GetImageRect
ImageList_Replace
CreateToolbarEx
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_DrawIndirect
CreateUpDownControl
ImageList_DragMove
ImageList_DrawEx
ImageList_Read

user32

ShowWindow
CreateWindowExW
RegisterClassExA
CopyAcceleratorTableW
SetWindowLongA
CharToOemBuffA
UnpackDDElParam
SetUserObjectSecurity
EnumDesktopsA
RegisterClassA
MessageBoxW

kernel32

MultiByteToWideChar
HeapAlloc
GetProcAddress
InterlockedDecrement
TlsSetValue
GetProcessHeaps
RtlUnwind
GetEnvironmentStrings
UnhandledExceptionFilter
IsValidLocale
ReadFile
IsDebuggerPresent
HeapReAlloc
GetTickCount
OpenWaitableTimerA
FlushFileBuffers
GetCurrentProcess
SetConsoleCtrlHandler
IsValidCodePage
GetConsoleOutputCP
GetConsoleMode
GetStringTypeW
WriteFile
WriteConsoleA
GetCommandLineA
GetEnvironmentStringsW
HeapDestroy
FreeLibrary
LCMapStringA
WriteConsoleW
GetTimeZoneInformation
GetLastError
LoadLibraryA
SetHandleCount
FreeEnvironmentStringsW
TerminateProcess
EnumSystemLocalesA
RtlZeroMemory
GetCurrentProcessId
VirtualAlloc
CompareStringA
LeaveCriticalSection
GetConsoleCP
InterlockedIncrement
WideCharToMultiByte
TlsGetValue
HeapFree
lstrcmp
SetEnvironmentVariableA
VirtualFree
GetModuleHandleA
CompareStringW
SetStdHandle
GetStdHandle
FreeEnvironmentStringsA
GetCurrentThread
ExitProcess
GetSystemTimeAsFileTime
VirtualQuery
GetLocaleInfoW
GetOEMCP
GetStringTypeA
SetUnhandledExceptionFilter
GetUserDefaultLCID
HeapSize
EnterCriticalSection
LCMapStringW
TlsAlloc
CreateMutexA
GetProcessHeap
lstrcmpiW
CreateFileA
SetFilePointer
HeapCreate
Sleep
GetTimeFormatA
GetLocaleInfoA
InterlockedExchange
GetCPInfo
GetStartupInfoA
GetCurrentThreadId
InitializeCriticalSection
GetModuleFileNameA
SetLastError
CloseHandle
QueryPerformanceCounter
DeleteCriticalSection
GetDateFormatA
GetVersionExA
SetThreadPriority
TlsFree
GetACP
FileTimeToDosDateTime
OpenMutexA
GetFileType

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc69966b7ea701a0d8cd400bf41316db

Headers

File Characteristics

Imports

gdi32

comctl32

user32

kernel32

Sections

.text Size: 312KB - Virtual size: 312KB

.rdata Size: 75KB - Virtual size: 96KB

.data Size: 118KB - Virtual size: 117KB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 312KB - Virtual size: 312KB

.rdata
Size: 75KB - Virtual size: 96KB

.data
Size: 118KB - Virtual size: 117KB

.rsrc
Size: 13KB - Virtual size: 12KB