64f8297b4717d1e4a4e7d96b494974b7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

64f8297b4717d1e4a4e7d96b494974b7_JaffaCakes118
Size

39KB
MD5

64f8297b4717d1e4a4e7d96b494974b7
SHA1

7c47a429c7dc5f92b2a867c225fd04d73b467a4c
SHA256

d8ef4ab84e007acc4454a0f7b82e309f3a56962e22bf2fd46476830988ae67ab
SHA512

42d7b6c53560f0145578e3f80e54eeafbc780a4266681c7b89c26cbd4b5acb97ec2cdec89aa5e76b22450dcc2f6dcf023bb93d6d41e383af5ffdea2a5a3de59e
SSDEEP

768:LXfQ52DUwkFl7BvAnH+dqPxeVlftOpSxW9TkkKdIN4HwyQ+zmoB3:r4sDhylJAnH+dOoTetT+9wF+aoB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f8297b4717d1e4a4e7d96b494974b7_JaffaCakes118

Files

64f8297b4717d1e4a4e7d96b494974b7_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

d4f69cd4000e495792c6e0264e208f42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineW
FormatMessageA
FormatMessageW
GetWindowsDirectoryW
GetVolumeInformationW
QueryPerformanceCounter
GetSystemTime
CreateFileW
GetModuleHandleA
MoveFileExW
GetDateFormatA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetCommandLineA
GetProcessHeap
GetSystemTimeAsFileTime
SetSystemPowerState
GetCPInfo
FindFirstFileW
FindNextFileW
FindClose
DeleteFileA
CopyFileA
CreateDirectoryW
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualProtect
VirtualAlloc
GetLocalTime

user32

SetPropA
GetMenuItemInfoA
KillTimer
SetTimer
GetScrollRange
ShowScrollBar
GetDlgItemInt
SetDlgItemInt
FrameRect
DialogBoxIndirectParamA
DispatchMessageA
GetSystemMenu
GetMenuItemCount
GetMenuItemID
RemoveMenu
UnhookWindowsHookEx
CreateDialogIndirectParamA
GetWindowTextA
DrawEdge
IsDlgButtonChecked
CheckDlgButton
SendMessageA
SetWindowTextA
EnumWindows
GetWindowRect
GetSystemMetrics
GetForegroundWindow
GetClientRect
PostMessageA
GetDesktopWindow
GetWindowThreadProcessId
DefWindowProcA
SendMessageTimeoutA

ole32

CoInitialize
CoCreateInstance
CLSIDFromString
OleUninitialize
OleInitialize
CoUninitialize

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
strcmp
fopen
fseek
fread
fclose
memmove
strncmp
atoi
strchr
malloc
free
fwrite
wcslen

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4f69cd4000e495792c6e0264e208f42

Headers

File Characteristics

Imports

kernel32

user32

ole32

msvcrt

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 196KB

.rsrc Size: 1024B - Virtual size: 896B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 196KB

.rsrc
Size: 1024B - Virtual size: 896B

.reloc
Size: 1KB - Virtual size: 1KB