65bc23feed41a9440d7c159e8c5f98a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

65bc23feed41a9440d7c159e8c5f98a0_JaffaCakes118
Size

897KB
MD5

65bc23feed41a9440d7c159e8c5f98a0
SHA1

ff0e9377293ab65b27954258cbb8b2aa5a9d902b
SHA256

9fc67a473f34b3303f9f46250988065b335e5fe6db2dd126cd55e54aceb344bf
SHA512

0e79e17031c182525881bccc597a842ae81145daad281676b3be53ceb687b711f45a4f7c9d25b9b1314fdcf13f30d6b289fce0af7242dc160490c7dd067b8167
SSDEEP

12288:yW787HOYzZSLlaUFe1OYpSX8eBfjRgeYlSC6WLmg9F+uWKtn9UfqQMnDSkVCzid:OLOYzZSLlawX8ayaCzr9PjUItV8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65bc23feed41a9440d7c159e8c5f98a0_JaffaCakes118

Files

65bc23feed41a9440d7c159e8c5f98a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragEnter
DestroyPropertySheetPage
ImageList_GetBkColor
ImageList_Draw

user32

DefMDIChildProcA
ShowScrollBar
GetClipboardSequenceNumber
CheckDlgButton
CloseWindowStation
OpenIcon
EmptyClipboard
GetMenuStringA
DestroyCaret
GetMessageExtraInfo
GetWindowWord
GetClipboardFormatNameA
OpenDesktopA
ChangeClipboardChain
GetMenuItemRect
OpenClipboard
VkKeyScanA
IsCharLowerW
EnumWindowStationsA

kernel32

GetProcessHeap
GetCompressedFileSizeW
ExitProcess
GlobalFlags
GetOEMCP
WritePrivateProfileStringA
WriteFile
ExitThread
LeaveCriticalSection
SetConsoleOutputCP
GetBinaryTypeA
_llseek
IsProcessorFeaturePresent
GenerateConsoleCtrlEvent
QueryDosDeviceW
GetProcessTimes
FreeResource
EraseTape
GetModuleFileNameW
DeleteFiber
GlobalAddAtomW
LCMapStringA
SetConsoleCursorPosition
GlobalAddAtomA
GetACP
CreateProcessA
EnumSystemCodePagesW
WriteConsoleOutputCharacterA
GetVersion
UnhandledExceptionFilter
GetEnvironmentStringsW
GetTimeZoneInformation
GetAtomNameA
GetLocaleInfoW
SetEvent
LocalReAlloc
SetConsoleTitleA
ReadFile
GetBinaryTypeW
EnumCalendarInfoW
GetSystemTimeAsFileTime
lstrcpynA
DeleteCriticalSection

advapi32

ObjectCloseAuditAlarmA
RegFlushKey
RegCreateKeyW
CryptExportKey
QueryServiceLockStatusW
RegQueryValueExA
StartServiceCtrlDispatcherA
StartServiceA
ReportEventW
LookupPrivilegeDisplayNameA
CryptReleaseContext
SetNamedSecurityInfoW
RegUnLoadKeyA
CopySid
SetSecurityDescriptorSacl
UnlockServiceDatabase

msvcrt

_mbsdec
perror
_wtol
_snwprintf
fread
_setmode
_getdcwd
_lseeki64
_beginthread
wcscoll
_itoa
wscanf
_ui64tow
_mbsrchr
_strdup
_chmod
_mbctoupper
mktime
_stricoll
_wsetlocale
ftell
_wstrdate
_controlfp
_isctype
iswxdigit

Sections

.text
Size: 11KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

Imports

comctl32

user32

kernel32

advapi32

msvcrt

Sections

.text Size: 11KB - Virtual size: 227KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 597KB - Virtual size: 596KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 11KB - Virtual size: 227KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 597KB - Virtual size: 596KB

.rsrc
Size: 17KB - Virtual size: 16KB