47e0fa11bfc6127448cfe0d10dcb93d4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

47e0fa11bfc6127448cfe0d10dcb93d4_JaffaCakes118
Size

168KB
MD5

47e0fa11bfc6127448cfe0d10dcb93d4
SHA1

698b306ed86a51b6c8bb6d0802c8eb84e0c15521
SHA256

8330a907d554b67beca27e00e3b4aac7c10ee8a5e6949a8517d70fe04ee19a50
SHA512

443d52881dfbbe75450c092eecc540ddd5e7d042b8b46d94a8281ae2781e4ed9541d72001ed9526509fdb7f95cf10fa971717ed2b7402935f9bd884ba5bc65f1
SSDEEP

3072:DODSzS8m3TJidETW4h9kU6lEHs3FLkSHeyGxnsQE6k:DMAS8oJuEWxtkjyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47e0fa11bfc6127448cfe0d10dcb93d4_JaffaCakes118

Files

47e0fa11bfc6127448cfe0d10dcb93d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb3844db76137545404cfaeb9614295e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
SetErrorMode
ReleaseMutex
FlushFileBuffers
LockResource
GlobalFree
CompareStringA
FormatMessageA
FreeLibrary
LoadResource
CreateEventA
HeapDestroy
RaiseException
InterlockedExchange
GlobalUnlock
FreeEnvironmentStringsA
TryEnterCriticalSection
WaitForSingleObject
ReadFile
GetLocalTime
FindCloseChangeNotification
DeleteFileW
RegisterWaitForSingleObject
SetEvent
GetSystemTime
GetVersionExA
ResetEvent
GetFileAttributesA
SetEndOfFile
WriteFileEx
GetFileSize
CreateFileA
FormatMessageW
CompareStringW
GetThreadLocale
InitializeCriticalSection
LocalAlloc
SetFilePointer
lstrlenW
GetModuleFileNameW
GetFileSizeEx
CloseHandle
FindClose
CreateEventW
InterlockedExchangeAdd
InterlockedCompareExchange
GetSystemInfo
ReadFileEx
SetFilePointerEx
WaitForSingleObjectEx
LocalFree
CreateThread
CreateFileW
GlobalAlloc
lstrlenA
SetEnvironmentVariableA
SleepEx
GetStartupInfoA

user32

SetMenuItemBitmaps
GetWindowWord
SetMenuItemInfoW
DefWindowProcW
LoadCursorW
GetForegroundWindow
PostMessageA
CreateWindowExW
SetWindowTextW
SetWindowTextA
ReleaseDC
GetMenuItemCount
RegisterClassA
GetWindowTextW
SetWindowPos
LoadStringA
TranslateMessage
DefWindowProcA
SendMessageA
DestroyIcon
GetClientRect

ole32

CoRegisterClassObject
CoSetProxyBlanket
CoRegisterChannelHook
CoTaskMemRealloc
CoRegisterInitializeSpy
CoReleaseMarshalData
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogate
CoRevokeInitializeSpy
CoResumeClassObjects
CoRevertToSelf
CoTreatAsClass
CoRevokeClassObject
CoSwitchCallContext
CoRevokeMallocSpy
CoSuspendClassObjects
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoReleaseServerProcess

shell32

SHBindToParent

msvcrt

__setusermatherr
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_onexit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb3844db76137545404cfaeb9614295e

Headers

File Characteristics

Imports

kernel32

user32

ole32

shell32

msvcrt

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 128KB - Virtual size: 221KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 128KB - Virtual size: 221KB

.rsrc
Size: 24KB - Virtual size: 20KB