8c2975718405fcee7a3c1ddfa0e883b1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8c2975718405fcee7a3c1ddfa0e883b1_JaffaCakes118
Size

340KB
MD5

8c2975718405fcee7a3c1ddfa0e883b1
SHA1

2a68cc6d03e2dfe1a4100a750719bee2d94f36dc
SHA256

b0eb9b12cde4f84400588714946a4994231b485ff5b214861cc137f802600b4b
SHA512

10245ecbf6c8fdbf1e0c14300e3c63eda61ac65b3242b19f609efdb83bfe4e1903bd3c90433def4f00891b1c6844931b7b44881bf40053a5229fe8327c66ee09
SSDEEP

6144:tuNsQ5iET9C9rkIfd1YiK94OXzeUpA3sXPnrdDXcq/Ewx:0Nr5iETQrR7NOiMA34P1cEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c2975718405fcee7a3c1ddfa0e883b1_JaffaCakes118

Files

8c2975718405fcee7a3c1ddfa0e883b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2920b2e2b7da380f9d8194339b32b89e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\zie\ihr\dyaofo\keoilqtto\eeu\mbhife.pdb

Imports

comdlg32

FindTextA

shell32

SHFileOperationA
SHGetDesktopFolder

kernel32

WideCharToMultiByte
ReadConsoleOutputCharacterA
LockFileEx
ReadFile
CreateDirectoryExW
GlobalReAlloc
GetTimeFormatA
HeapReAlloc
LCMapStringW
TlsAlloc
GetFileAttributesA
CreateMutexA
WritePrivateProfileStringA
GetLocaleInfoW
GetTickCount
LockResource
GetProcAddress
GetOEMCP
GetFileType
GetEnvironmentStringsW
TlsFree
FreeResource
CompareStringA
GetFileAttributesW
GetCurrentThread
SetLastError
MultiByteToWideChar
GetEnvironmentStrings
TerminateProcess
DeleteCriticalSection
VirtualProtect
WritePrivateProfileSectionA
FillConsoleOutputAttribute
GetPrivateProfileStructW
OutputDebugStringW
LoadLibraryA
HeapDestroy
FindNextChangeNotification
GetPriorityClass
GetCurrentProcess
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
WaitNamedPipeW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CreateThread
GetVersionExA
GetStringTypeW
FormatMessageW
GetLocaleInfoA
GetPrivateProfileStringW
GetCurrentProcessId
GetTimeZoneInformation
FoldStringA
GetStdHandle
GetUserDefaultLCID
HeapFree
SetEvent
GlobalDeleteAtom
EnumTimeFormatsW
LCMapStringA
EnumSystemLocalesA
SetEnvironmentVariableA
ExitProcess
TlsGetValue
QueryPerformanceCounter
OpenMutexA
VirtualAlloc
GetCPInfo
IsValidLocale
EnumResourceNamesA
GetEnvironmentVariableW
UnhandledExceptionFilter
HeapSize
GetThreadTimes
GetLastError
lstrcmpW
GetFullPathNameA
WriteFile
ReadConsoleW
GetSystemInfo
SetHandleCount
GetThreadSelectorEntry
FlushFileBuffers
EnumSystemCodePagesA
GetProfileIntA
FillConsoleOutputCharacterW
GetThreadPriority
GetVersion
CompareStringW
GetCommandLineA
VirtualQuery
GetACP
SetLocalTime
SetCriticalSectionSpinCount
GetDateFormatA
SetFilePointer
SetEndOfFile
WriteFileEx
IsValidCodePage
GetStartupInfoA
InterlockedExchange
VirtualFreeEx
SetStdHandle
GetModuleFileNameA
GetSystemTimeAsFileTime
GetAtomNameW
GetCurrentThreadId
GetDriveTypeW
EnterCriticalSection
IsBadWritePtr
InitializeCriticalSection
RtlMoveMemory
GetModuleHandleA
EnumCalendarInfoA
GetFileTime
TlsSetValue
FindAtomW
SetCurrentDirectoryA
GetStringTypeA
CloseHandle
WaitForSingleObject
LeaveCriticalSection
MapViewOfFile

advapi32

RegLoadKeyW
RegDeleteValueW
AbortSystemShutdownA

user32

WaitForInputIdle
DdeImpersonateClient
GetClassInfoExW
SetCaretPos
MoveWindow
IsWindowEnabled
CreateAcceleratorTableA
ShowWindowAsync
GetDlgCtrlID
SetWindowLongW
CharLowerBuffA
ReuseDDElParam
WINNLSEnableIME
DdeFreeDataHandle
IsCharUpperA
TranslateAcceleratorA
DefWindowProcW
IsWindowUnicode
FindWindowExW
GetUpdateRect
GetPropW
GetWindowInfo
CloseWindowStation
GetKeyboardState
ScreenToClient
DialogBoxIndirectParamW
AttachThreadInput
SendInput
ToUnicode
ToAsciiEx
IsDialogMessageA
EnableScrollBar
GetScrollBarInfo
LookupIconIdFromDirectoryEx
GetKeyboardLayoutNameA
SendIMEMessageExW
EnumChildWindows
SwitchDesktop
CharToOemW
RegisterClassA
OemToCharA
CharNextW
DdeClientTransaction
ReleaseCapture
GetTopWindow
GetComboBoxInfo
RegisterClipboardFormatW
AnyPopup
GetTitleBarInfo
IsCharAlphaW
BroadcastSystemMessageW
GetKeyboardLayoutList
EnumDisplaySettingsA
IsRectEmpty
DefMDIChildProcA
GetSubMenu
SetMenuItemBitmaps
DrawFocusRect
DdeFreeStringHandle
GetClassWord
ChangeMenuW
ReleaseDC
SetDlgItemTextW
GetWindowRgn
PeekMessageW
CreateAcceleratorTableW
SetWindowTextA
OpenInputDesktop
ScrollWindowEx
LoadStringW
ShowWindow
RegisterClassExA
DrawTextA
LoadIconW
InSendMessage
DdeConnectList
GetSystemMenu
CreateIconFromResourceEx
DestroyWindow
DefDlgProcW
DdeQueryConvInfo
CallWindowProcA
MapVirtualKeyExW
MessageBoxA
PostThreadMessageW
IsClipboardFormatAvailable
TranslateMDISysAccel
IsDlgButtonChecked
RemoveMenu
SetPropA
CreateWindowExA
GetQueueStatus
CharPrevExA
SetUserObjectSecurity
EndDeferWindowPos
DdeInitializeW
GetDlgItemTextW
PostQuitMessage
EnumDisplayDevicesW

comctl32

InitCommonControlsEx
CreateStatusWindowA
CreateToolbarEx
CreatePropertySheetPageW

wininet

InternetSetDialStateA
RetrieveUrlCacheEntryStreamW

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2920b2e2b7da380f9d8194339b32b89e

Headers

File Characteristics

PDB Paths

Imports

comdlg32

shell32

kernel32

advapi32

user32

comctl32

wininet

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 92KB - Virtual size: 106KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 92KB - Virtual size: 106KB

.rsrc
Size: 16KB - Virtual size: 12KB