a2c270295fe28767d6cea60dae64fb53_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a2c270295fe28767d6cea60dae64fb53_JaffaCakes118
Size

592KB
MD5

a2c270295fe28767d6cea60dae64fb53
SHA1

35a6b47e4b3decba9ee66fbb96561bab2af2efa5
SHA256

cf03cf05be19bf96fe28146132dbd84a813cdadad7663113d3d5387e8355d442
SHA512

7318ee931d8e79af6a2d6faee91d3cb715d9e6bbfeb3a05b40e36b77f7915a7cd75a3fb95a43977817e8216729904578cd31e3a2f384799e856f565ad26d700a
SSDEEP

12288:n6Hq7GN3VyS+qmfRdMy0JR0BdYqudBhrYdDS3cj98a6QpkrdsMuAMk/5ibzDSi:n6K7GFVyvq6RRBdYqGhrYxS3s98ukkeg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c270295fe28767d6cea60dae64fb53_JaffaCakes118

Files

a2c270295fe28767d6cea60dae64fb53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40581545509be3d59e8c3fbe733dcb1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyMenu
CreateMDIWindowA
AdjustWindowRect
EnumWindows
WinHelpA
CreateWindowExA
KillTimer
LoadImageA
DestroyCursor
ExitWindowsEx
MessageBoxA
GetSystemMetrics
SystemParametersInfoW
EnableScrollBar
SetMenuInfo
DlgDirListW
RegisterClassExA
ShowWindow
DefWindowProcW
RegisterClassA
GetComboBoxInfo
PostMessageA
BroadcastSystemMessageW
SendMessageA
GetDoubleClickTime
DialogBoxIndirectParamW
PeekMessageA
DestroyWindow
LoadIconW
GetInputDesktop
SetTimer
GetClassInfoExW
SendNotifyMessageA
GetProcessDefaultLayout
SetPropA
MessageBoxIndirectW

kernel32

GetCurrentProcess
EnterCriticalSection
SetEnvironmentVariableA
InterlockedDecrement
GetLocalTime
GetTickCount
LCMapStringW
TlsFree
CreateMutexW
IsBadWritePtr
TlsGetValue
GetSystemTime
ExitProcess
OpenEventW
VirtualQuery
TlsSetValue
TerminateProcess
SetFilePointer
RtlUnwind
SetHandleCount
HeapCreate
OpenMutexA
TlsAlloc
FlushFileBuffers
CompareStringW
GetVersion
HeapReAlloc
SetLastError
GetConsoleMode
GetModuleHandleA
DeleteCriticalSection
GetACP
HeapDestroy
CompareStringA
EnumDateFormatsW
VirtualAlloc
GetCPInfo
HeapFree
WriteFile
FreeEnvironmentStringsA
GetConsoleTitleW
GetCurrentThread
CreateMutexA
UnhandledExceptionFilter
GetFileType
GetEnvironmentStringsW
GetProcAddress
HeapSize
GetStartupInfoA
HeapAlloc
GetCurrentProcessId
GetStringTypeW
SetStdHandle
QueryPerformanceCounter
GetModuleFileNameA
WideCharToMultiByte
GetStdHandle
VirtualFree
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
InterlockedIncrement
LocalSize
GetStringTypeA
ReadConsoleOutputA
InitializeCriticalSection
GetEnvironmentStrings
DebugActiveProcess
UnmapViewOfFile
GetCurrentDirectoryA
GetTimeZoneInformation
CloseHandle
FileTimeToSystemTime
GetOEMCP
LeaveCriticalSection
GlobalAlloc
ReadFile
EnumResourceNamesA
LoadLibraryA
InterlockedExchange
GetCommandLineA
GetLastError
MultiByteToWideChar
LCMapStringA

comctl32

ImageList_DragMove
DrawInsert
MakeDragList
InitCommonControlsEx
ImageList_Write
CreateToolbar
ImageList_Replace
ImageList_SetBkColor
ImageList_DrawEx
ImageList_Copy
ImageList_AddMasked
CreateStatusWindowW
ImageList_DrawIndirect

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40581545509be3d59e8c3fbe733dcb1a

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 152KB - Virtual size: 150KB

.rdata Size: 300KB - Virtual size: 298KB

.data Size: 124KB - Virtual size: 126KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 152KB - Virtual size: 150KB

.rdata
Size: 300KB - Virtual size: 298KB

.data
Size: 124KB - Virtual size: 126KB

.rsrc
Size: 12KB - Virtual size: 8KB