bbd8d7903146fe1f35a265b22b5fb0de_JaffaCakes118

General

Target

bbd8d7903146fe1f35a265b22b5fb0de_JaffaCakes118
Size

192KB
MD5

bbd8d7903146fe1f35a265b22b5fb0de
SHA1

d3cfc806eb040fcb6260ba89010a1603243df6b0
SHA256

a2d690cb7af2091428b572e652042010d3ea8cfd1085b952e0f1a246865bc1b1
SHA512

f6bf458aa5c10524f013d81462ab49e1f242eb46cc88ac3781858c7d53e275bdecf72f12f43740032be95e40cb568f6cadd59e481fb85ad804bff749dc5f1338
SSDEEP

3072:oEYuaNjmYnWHVo1TcD6PmufdZ5U0b7/DwnoM4Tt+6tbwcoVjDPEqTk2t:YNxnWHV+Txmu1l/GKFb8VjDPEqTk2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd8d7903146fe1f35a265b22b5fb0de_JaffaCakes118

Files

bbd8d7903146fe1f35a265b22b5fb0de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06cafb13d6f17733494a4f652b6b6ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
FlashWindow
wsprintfA
GetActiveWindow

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
tolower
_ftol
__CxxFrameHandler
srand
??2@YAPAXI@Z
memmove
rand
memset
_except_handler3
_itoa
_strlwr

kernel32

GetTempPathA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
SetFileAttributesA
DeleteFileA
GetFileAttributesA
CreateDirectoryA
IsBadWritePtr
GetTickCount
GetCurrentThreadId
GetCommandLineA
SetUnhandledExceptionFilter
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetShortPathNameA
GetCurrentProcess
CreateEventA
WaitForSingleObject
SleepEx
CreateFileA
GetCurrentProcessId
WriteFile
GetModuleFileNameA
GetFileTime
SetFileTime
CloseHandle
MoveFileA
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
ExitProcess
LoadLibraryA
GetCurrentDirectoryA

shlwapi

SHGetValueA
SHDeleteKeyA
SHCopyKeyA

ws2_32

getprotobynumber
closesocket

Sections

CODE
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06cafb13d6f17733494a4f652b6b6ff0

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

shlwapi

ws2_32

Sections

CODE Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 1KB

CODE
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 1KB