acda5fa2aecae8a43eeda7741ac72c21_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

acda5fa2aecae8a43eeda7741ac72c21_JaffaCakes118
Size

141KB
MD5

acda5fa2aecae8a43eeda7741ac72c21
SHA1

3ac81bc714f2c292fb41a5dee3ed8f4ce65cafd8
SHA256

414a17ec9640ce844c1e4fe8cd9964fc8c9aece57a632c3bfe08a30362fed966
SHA512

091a7194106d1dbd6ab3e3ba3de3fbba8db7ad3c5faad0cafcb0cf8f386ace589e205680a20c018c46ee1c5d084e88f12c6c98e47ec9754656e5e59152a906e6
SSDEEP

3072:OSFZGwRFEXgLB4vTi84Eh89b7OswRPsOEiHTJdrZb1:OSFZHLBNEaJ7OswR0OlTbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acda5fa2aecae8a43eeda7741ac72c21_JaffaCakes118

Files

acda5fa2aecae8a43eeda7741ac72c21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentDirectoryA
VirtualAlloc
GetLastError
lstrcpynA
OutputDebugStringA
TerminateThread
LoadLibraryW
GetStartupInfoW
VirtualFree
CreateFiberEx
GetACP
SetEvent
GetConsoleMode
GetModuleFileNameW
SetHandleCount
GetEnvironmentStringsW
GetThreadLocale
GetStdHandle
CloseHandle
GetModuleHandleA
GetCurrentProcess
ExitThread
GlobalAlloc
EndUpdateResourceA
GetProcAddress
lstrcpyW
FreeEnvironmentStringsA
DosDateTimeToFileTime
GetTimeFormatW
VirtualProtect
CreateFiber
FileTimeToSystemTime
GetFileAttributesA

msvcrt

wcstok
atoi
memset
toupper
printf
_wtoi
wcsrchr
wcsncpy
memcpy
strncpy
wcstol
_wcsnicmp
_wcmdln
towupper
_XcptFilter
__CxxFrameHandler
wcscmp
_wcsicmp
swscanf
tmpnam
__setusermatherr

user32

ReleaseDC
RegisterClassA
wsprintfW
GetCursorPos
DestroyWindow
LoadCursorA
DispatchMessageW
SetScrollPos
IsWindow
MapWindowPoints
LoadImageW
SendMessageA
DialogBoxParamA
GetMenuItemCount
CheckDlgButton
GetParent
ClientToScreen
BeginPaint
SendMessageW
GetProcessWindowStation
UnregisterClassW
CopyRect
LoadCursorW
LoadMenuW
SetCapture
ScreenToClient
ReleaseCapture

gdi32

CreateBitmap
CreateFontIndirectW
TranslateCharsetInfo
SetTextColor
CreateCompatibleDC
StretchBlt
SetBkMode
RestoreDC
Rectangle
PatBlt

opengl32

glColor4f
glTexCoord2dv
glFogfv
GlmfBeginGlsBlock
glColor4i
wglShareLists
glColor3ui
glStencilMask
glColor4d
glTexCoord2d

Exports

Exports

VilJlhuQpanqTzh
YaNgetjMbklbzIawgzWns
AeKzzenVyzzq

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.crt Size: 512B - Virtual size: 72B

.rdata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 512B - Virtual size: 262B

.text
Size: 13KB - Virtual size: 13KB

.crt
Size: 512B - Virtual size: 72B

.rdata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 512B - Virtual size: 262B