6f838637b2d8ca321d65241f2565d8e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f838637b2d8ca321d65241f2565d8e6_JaffaCakes118
Size

197KB
MD5

6f838637b2d8ca321d65241f2565d8e6
SHA1

32d17863926a9c10350388bb87bac5140767c1cf
SHA256

71869089e89c32cddf3c146830527a093d2b987c2e8279fcb8d70b0f85d7efa1
SHA512

fba4207bbd25726bf0516d6bd0c76bb945f0880fb299f6de0f30f3287e247755f131b6b4cce5659364f6d36554d108fd115408b12e73211bf310f24a16fd3d52
SSDEEP

3072:MDzbN+o76j4fumxSzlfSk4TJMg4Yclx7LhyohQpgmZXYj7uwGy0hcNklQS:MX1OkXSzl1OY1yoOpKuwPrYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f838637b2d8ca321d65241f2565d8e6_JaffaCakes118

Files

6f838637b2d8ca321d65241f2565d8e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eeb472ee3fd7bc88851875c9fd4a3fac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
GetFileTime
SetLocaleInfoA
lstrcmpi
FindAtomW
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetTempPathW
GetSystemDefaultLangID
CreateFileA
QueryPerformanceFrequency
CopyFileA
lstrcmpiA
GetCurrentDirectoryW
GetLocaleInfoW
CreateEventA
lstrlen
lstrlenW
ExpandEnvironmentStringsA
OpenMutexA
GetComputerNameA
SetLocaleInfoW
BeginUpdateResourceW
GetCurrentProcessId
GetCPInfo
GetProcessHeap
MoveFileA
lstrcatA
GetExpandedNameA
GetShortPathNameW
GetUserDefaultLangID
GetLocalTime
ReplaceFileW
GetEnvironmentVariableW
LoadResource
ExitProcess
ReadFile
lstrcmpA
GetSystemDefaultLCID
GetStartupInfoW
GetTempPathA
EnumDateFormatsW
SystemTimeToFileTime
GetEnvironmentStringsA

user32

GetKeyState
CreateDialogIndirectParamA
CheckDlgButton
SetCursorPos
InsertMenuA
UpdateLayeredWindow
RegisterClassExA
GetMenuItemID
GetClientRect
CreateDialogParamA
DialogBoxIndirectParamA
CreatePopupMenu
OffsetRect
EnumChildWindows
CopyRect
CheckRadioButton
CharLowerW
WinHelpA
PeekMessageW
ActivateKeyboardLayout
GetClassNameW
wvsprintfA
PostMessageA
RegisterWindowMessageW
GetCursorPos
PostMessageW
MessageBoxA
InvalidateRect
GetMenuState
SetWindowLongA
IsWindow
MessageBoxW
SendDlgItemMessageA
DestroyCursor
CreateMenu
CharPrevA
IsIconic
CopyImage
EnableWindow
DrawIcon
FindWindowW
GetWindowLongW
wvsprintfW
BringWindowToTop
SendDlgItemMessageW
LoadBitmapW
DefFrameProcA

gdi32

Polyline
EnumFontsW
MoveToEx
GetNearestColor
GetCharWidthA
UpdateColors
CreateDCA
GetPixelFormat
OffsetRgn
CombineRgn
GetLogColorSpaceA
SetColorSpace
SetDIBits
SetColorAdjustment
InvertRgn
GetPolyFillMode

advapi32

RegSaveKeyA
RegReplaceKeyA
RegOpenKeyExA
RegDeleteKeyW

inetcomm

EssReceiptDecodeEx
EssSecurityLabelEncodeEx
MimeOleGetPropertySchema
MimeOleAlgNameFromSMimeCap
HrGetAttachIcon
MimeOleGetCertsFromThumbprints
MimeOleCreateHeaderTable
EssContentHintEncodeEx
HrGetLastOpenFileDirectory
MimeOleGetFileExtension
MimeOleCreateMessageParts
MimeOleDecodeHeader
MimeOleCreateHashTable

sqlunirl

_EnumResourceNames_@16
ConvertMultiSZNameToW
_CreateEnhMetaFile_@16
_CreateProcessAsUser_@44
_EnumResourceTypes_@12
_AddAtom_@4
_DefFrameProc_@20
_GetPrivateProfileSectionNames_@12
_DrawState_@40
_DialogBoxParam_@20
_DlgDirList_@20
_NDdeShareAdd_@20

wsock32

NPLoadNameSpaces
getpeername
send
connect
GetNameByTypeA
WSAAsyncGetServByPort
getsockname
gethostbyname
closesocket

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.YtM
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brp
Size: 512B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GtLiHu
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NtXc
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NIBZ
Size: 1024B - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zsP
Size: 1KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eeb472ee3fd7bc88851875c9fd4a3fac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

inetcomm

sqlunirl

wsock32

Sections

.text Size: 11KB - Virtual size: 11KB

.YtM Size: 1024B - Virtual size: 6KB

.brp Size: 512B - Virtual size: 48KB

.GtLiHu Size: 4KB - Virtual size: 16KB

.NtXc Size: 1KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 4KB

.NIBZ Size: 1024B - Virtual size: 43KB

.zsP Size: 1KB - Virtual size: 254KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1024B - Virtual size: 908B

.text
Size: 11KB - Virtual size: 11KB

.YtM
Size: 1024B - Virtual size: 6KB

.brp
Size: 512B - Virtual size: 48KB

.GtLiHu
Size: 4KB - Virtual size: 16KB

.NtXc
Size: 1KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 4KB

.NIBZ
Size: 1024B - Virtual size: 43KB

.zsP
Size: 1KB - Virtual size: 254KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1024B - Virtual size: 908B