878c78ca320e46d24c33944540bb187e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

878c78ca320e46d24c33944540bb187e_JaffaCakes118
Size

268KB
MD5

878c78ca320e46d24c33944540bb187e
SHA1

24bb8be5dffdbd92c96981ed9b0abcf8dbdcfae6
SHA256

c9a9554fc8052db946e7061952e2ea9b235c7f74c5677e6e7a51f8417fc7a6a0
SHA512

141636ecd91eb33b4cebb86a25f7820641296c3c35ed000d1366a445ddce31d98c9f8c788f197a1dcf1233acb0bc787fe1cc6219962932d7f805d45b02c2ac03
SSDEEP

3072:VMhiaraHFvpqKFHjAQdged24j3PDPYtFjGl:VMhralvsSjAQdg0223P8tK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878c78ca320e46d24c33944540bb187e_JaffaCakes118

Files

878c78ca320e46d24c33944540bb187e_JaffaCakes118
.exe windows:6 windows x86 arch:x86

0fc1443cde4f5ad2c236c0314403cdb8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
LocalAlloc
VirtualFree
VirtualFree
QueryPerformanceCounter
GetModuleHandleA
GetCurrentProcess
VirtualFree
QueryPerformanceCounter
GetModuleHandleW
GetProcessHeap
GetCommandLineW
QueryPerformanceCounter
GetCommandLineA
LocalFree
GetCommandLineA
GetACP
GetCommandLineA
WaitForSingleObject
GetTickCount
QueryPerformanceCounter
VirtualFree
MultiByteToWideChar
GetCurrentThreadId
WaitForSingleObject
GetACP
LocalFree
MultiByteToWideChar
GetModuleHandleW
WaitForSingleObject
GetModuleHandleA
GetACP
GetACP
GetCommandLineW
GetCurrentProcessId
GetCurrentProcessId
SetEvent
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleW
GetCurrentThreadId
GetModuleHandleW
GetModuleHandleA
SetEvent
GetCurrentThreadId
FormatMessageW
FormatMessageW
GetCommandLineW
GetCurrentProcess
QueryPerformanceCounter
GetModuleHandleA
MultiByteToWideChar
MultiByteToWideChar
SetUnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleW
SetUnhandledExceptionFilter
SleepEx
GetCurrentProcess
GetCommandLineW
GetModuleHandleW
SetUnhandledExceptionFilter
LocalAlloc
GetCurrentProcessId
LocalFree
GetModuleHandleA
GetModuleHandleA
GetCommandLineW
GetACP
GetModuleHandleA
GetCurrentProcess
WaitForSingleObject
GetCurrentProcess
MultiByteToWideChar
GetCommandLineA
GetTickCount
LocalAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
GetCurrentProcessId
GetCurrentProcessId
GetModuleFileNameA
SetUnhandledExceptionFilter
LocalFree
GetModuleHandleA
GetModuleHandleW
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCommandLineA
GetModuleHandleA
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetACP
LocalAlloc
GetCurrentThreadId

ntdll

NtAllocateVirtualMemory

user32

GetMessageW
CreateWindowExW
DefWindowProcW
GetMessageW
DestroyWindow
DestroyWindow
GetDlgItem
GetWindowRect
ShowWindow
GetDlgItem
GetMessageW
ShowWindow
GetMessageW
DestroyWindow
SetTimer
GetMessageW
DestroyWindow
SendMessageW
ShowWindow
PostMessageW
LoadIconW
GetMessageW
LoadIconW
ReleaseDC
DestroyWindow
GetDC
DestroyWindow
GetDC
PostMessageW
GetMessageW
DestroyWindow
GetMessageW
ReleaseDC
LoadIconW
SendMessageW
ShowWindow
SetTimer
SetTimer
PostMessageW
PostMessageW
ShowWindow
SendMessageW
CreateWindowExW
GetDlgItem
ShowWindow
GetWindowRect
CreateWindowExW
CreateWindowExW
LoadIconW
DestroyWindow
GetWindowRect
GetDlgItem
GetWindowRect
GetDlgItem
LoadIconW
ReleaseDC
ReleaseDC
CreateWindowExW
LoadIconW
CreateWindowExW
LoadIconW
GetDlgItem
GetWindowRect
GetDC
GetDC
LoadIconW
GetMessageW
ReleaseDC
SendMessageW
GetWindowRect
SetTimer
GetDlgItem
GetDC
PostMessageW
PostMessageW
PostMessageW
GetMessageW
DestroyWindow
SendMessageW
PostMessageW
PostMessageW
GetDlgItem
GetMessageW
GetDC
LoadIconW
ReleaseDC
DefWindowProcW
GetMessageW
SendMessageW
SendMessageW
SetTimer
GetDC
SetTimer
GetDC
GetDC
DestroyWindow
GetMessageW
GetSystemMetrics
GetDlgItem
SendMessageW
CreateWindowExW
GetSystemMetrics
GetDC
CreateWindowExW
ShowWindow
GetDlgItem

gdi32

DeleteObject
GetDeviceCaps
GetStockObject
GetStockObject
MoveToEx
SetTextColor
GetDeviceCaps
LineTo
DeleteDC
LineTo
LineTo
DeleteObject
DeleteObject
SelectObject
GetDeviceCaps
LineTo
GetObjectW
SelectObject
LineTo
DeleteObject
GetStockObject
SelectObject
GetObjectW
SetTextColor
DeleteDC
GetStockObject
SetTextColor
MoveToEx
GetStockObject
MoveToEx
GetObjectW
SelectObject
SetTextColor
LineTo
GetDeviceCaps
SelectObject
LineTo
PatBlt
BitBlt
GetObjectW
GetDeviceCaps
PatBlt
GetTextMetricsW
SelectObject
CreateCompatibleBitmap
GetStockObject
BitBlt
GetStockObject
MoveToEx
DeleteDC
DeleteDC
GetObjectW
CreateCompatibleDC
SetTextColor
DeleteObject
SetTextColor
CreateCompatibleBitmap
LineTo
PatBlt
SelectObject
SelectObject
DeleteObject
GetTextMetricsW
DeleteObject
GetTextMetricsW
PatBlt
DeleteDC
GetStockObject
CreateCompatibleDC
CreateCompatibleDC
CreateCompatibleDC
DeleteObject
GetTextMetricsW
PatBlt
PatBlt
GetDeviceCaps
DeleteDC
CreateCompatibleBitmap
SelectObject
MoveToEx
LineTo
BitBlt
BitBlt
CreateCompatibleBitmap
DeleteObject
MoveToEx
CreateCompatibleDC
GetStockObject
GetObjectW
DeleteDC
DeleteDC
CreateCompatibleBitmap
MoveToEx
DeleteDC
GetStockObject
DeleteObject
GetDeviceCaps
DeleteObject
GetStockObject
GetObjectW
GetStockObject
MoveToEx
GetDeviceCaps
GetObjectW
CreateCompatibleDC
GetStockObject

Sections

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fc1443cde4f5ad2c236c0314403cdb8

Headers

File Characteristics

Imports

kernel32

ntdll

user32

gdi32

Sections

.data Size: 24KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 8KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 124KB - Virtual size: 124KB

.data
Size: 24KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 8KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 124KB - Virtual size: 124KB