b849e3bf442e4c1f1c914e73a99a79dd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b849e3bf442e4c1f1c914e73a99a79dd_JaffaCakes118
Size

208KB
MD5

b849e3bf442e4c1f1c914e73a99a79dd
SHA1

bf58f80dc9137c52a3de063a44a9dbc856d04df2
SHA256

6adbbfbb34cf395c693f8956c46a35c30e75e6d04cf63d5195702d6092672ee6
SHA512

0391373773c8a1f66c69f01c2f9dc3a2fce94982b55d2b0ca7b632d2541adede9bc02373a036f1de8ad849c6b6f4d59fd96d98ba0dc641dbdee736b44240d3ff
SSDEEP

6144:6ZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:YquCuygMQjd5vJIBP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b849e3bf442e4c1f1c914e73a99a79dd_JaffaCakes118

Files

b849e3bf442e4c1f1c914e73a99a79dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA

user32

GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor

gdi32

CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx

advapi32

RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey

shlwapi

StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW

opengl32

glReadBuffer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PwM
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OwvyT
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MTxF
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XWRUxX
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YCYo
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tKhtUt
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

Sections

.text Size: 12KB - Virtual size: 11KB

.PwM Size: 1KB - Virtual size: 10KB

.OwvyT Size: 3KB - Virtual size: 26KB

.MTxF Size: 1KB - Virtual size: 37KB

.XWRUxX Size: 1KB - Virtual size: 40KB

.data Size: 11KB - Virtual size: 11KB

.YCYo Size: 1KB - Virtual size: 8KB

.tKhtUt Size: 2KB - Virtual size: 221KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.PwM
Size: 1KB - Virtual size: 10KB

.OwvyT
Size: 3KB - Virtual size: 26KB

.MTxF
Size: 1KB - Virtual size: 37KB

.XWRUxX
Size: 1KB - Virtual size: 40KB

.data
Size: 11KB - Virtual size: 11KB

.YCYo
Size: 1KB - Virtual size: 8KB

.tKhtUt
Size: 2KB - Virtual size: 221KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB