5b5875fae2d7c2cb828dbd70cb929ba3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5b5875fae2d7c2cb828dbd70cb929ba3_JaffaCakes118
Size

203KB
MD5

5b5875fae2d7c2cb828dbd70cb929ba3
SHA1

be9ab10258bae7d741cfe7e3bcaf97df25d740fa
SHA256

e5a291c20a9f574ac912cb31e902bd628ba89e3dbf314ee1229a5240d4ab70b0
SHA512

5d74008052a2eb59a1a34d42491d31436977085c81fc98c3d5f9aff56565703c2cc28f14177ecbadafe700b78ccf63f607efa760cd431562525d9ca86bfb9c09
SSDEEP

3072:aQHryTZWL5BHeHD1V2o1S0h4/UNfJon435fjKeVeZ2Bq9f3HvWkKdxY19eEW:1rgofej1VPRW/UQnKueVFBq930dxI9ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b5875fae2d7c2cb828dbd70cb929ba3_JaffaCakes118

Files

5b5875fae2d7c2cb828dbd70cb929ba3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

fa6876baa691c4eda490fcaf12ecfdfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_strnicmp
_wfindfirst64
_wfopen
_wcreat
_ismbcspace
__p__commode
_wspawnve
_filelengthi64
_strset
_wcstoui64
__p__fmode
_getw
_lrotl
_mbctombb
puts
strcpy
_exit
_cgets
floor
wcstod
_finite
wcspbrk
_outpd
_adjust_fdiv
_chmod
_adj_fptan
_getwch
__setusermatherr
_chgsign
_wspawnv
_XcptFilter
_controlfp
mktime
_wutime64
_adj_fdivr_m32i
_mbsnbcpy
_lseeki64
memchr
memset
__getmainargs
log
_mbcjmstojis
exit
signal
acos
__set_app_type
_except_handler3
asin
_initterm
_wpopen
_tzset
_winver
_aligned_free
_wpgmptr
_control87
memcpy
_putenv
_rotl
_mbsnbcmp
_acmdln
_wstrtime
_atodbl

user32

FindWindowA
SetScrollInfo
CallWindowProcA
IntersectRect
CreateMenu
AppendMenuA
DialogBoxIndirectParamA
TranslateMessage
BeginPaint
GetClientRect
IsWindowVisible
GetCapture
GetMessageA
FillRect
LoadCursorA
IsDialogMessageA
TrackPopupMenu
EnableMenuItem
SetUserObjectSecurity
ExitWindowsEx
ModifyMenuA
RegisterClassA
SetTimer
ClientToScreen
SetForegroundWindow
SetClipboardData
InflateRect
SetPropA
DrawFrameControl
DeleteMenu
WindowFromPoint
RegisterWindowMessageA
DrawIconEx
GetWindowRect
LoadIconA
CreatePopupMenu
GetMenu
SetWindowPos
SetClassLongA
GetDoubleClickTime
GetSystemMetrics
GetDesktopWindow
DialogBoxParamA
EnumChildWindows
InvalidateRgn
GetDC
GetClassLongA

kernel32

LocalAlloc
GetCurrentProcessId
FreeEnvironmentStringsA
Module32Next
Sleep
SizeofResource
GetProcessAffinityMask
OpenEventA
SetLastError
TlsFree
SetEvent
GetFileType
ExpandEnvironmentStringsA
MulDiv
ResumeThread
GetConsoleMode
DeviceIoControl
GetDateFormatA
InitializeCriticalSection
lstrcpynA
GetConsoleCP
VirtualQueryEx
FreeLibrary
lstrcmpA
QueryPerformanceCounter
FreeEnvironmentStringsW
FileTimeToLocalFileTime
GetThreadContext
GlobalUnlock
GetVersion
GetModuleHandleA
SetFilePointer
LocalFree
GetCommandLineA
TerminateProcess
GlobalAlloc
FindFirstFileA
WaitForSingleObject
GetModuleHandleW
ReadFile
GetLastError
GetStringTypeA
GetProcessWorkingSetSize
GlobalMemoryStatus
GetStartupInfoA
GetCurrentThreadId
CloseHandle
lstrcatA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa6876baa691c4eda490fcaf12ecfdfe

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 185KB - Virtual size: 185KB

.data Size: 512B - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 185KB - Virtual size: 185KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 4B