bccb5fab150d82535671e8f8606a017d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bccb5fab150d82535671e8f8606a017d_JaffaCakes118
Size

858KB
MD5

bccb5fab150d82535671e8f8606a017d
SHA1

f0867c103491216a162c90683d82522e89ec29c8
SHA256

83442ba983c23be107fd627908f834e28a29a110d5e0d9849413e4f5faafa2b9
SHA512

6efae9fd2517ede71051a8caaa6892042adfc1ddb19e54a0dd4ae03b9e4d027a0514f7b3046dc4b16fc38426a68b9142b28bf24828f6935c4399e0b3d03b9b81
SSDEEP

24576:2FWWsF1Z4p3AEeVfKFG6Q3zw5PYSxG//aI9zv:bWQWAjK1pPYSxgaIZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bccb5fab150d82535671e8f8606a017d_JaffaCakes118

Files

bccb5fab150d82535671e8f8606a017d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ecc1083dbb320bf48dad2db540962ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

sendto
accept
WSAAsyncGetServByPort
WSASendDisconnect

version

GetFileVersionInfoSizeA
VerInstallFileA
VerFindFileA

kernel32

EnumResourceNamesW
GetCommConfig
GetShortPathNameA
SwitchToFiber
SetupComm
TlsGetValue
OutputDebugStringA
SetCurrentDirectoryA
ReadDirectoryChangesW
ExitProcess
GetDateFormatA
LoadLibraryExA
LoadLibraryExW
GetCurrentProcessId
GetLongPathNameA
FreeEnvironmentStringsA
Beep
OpenMutexA
GetCompressedFileSizeW
SetEnvironmentVariableA
WriteProcessMemory
FormatMessageW
GetTickCount
GetNumberFormatW
EndUpdateResourceA
GetLogicalDriveStringsA
GlobalFindAtomW
GetCommModemStatus
WritePrivateProfileStructA
IsBadReadPtr
FindFirstFileW
CancelIo
GetStartupInfoA
OpenFile
GetOEMCP
LCMapStringA
FlushConsoleInputBuffer
GlobalAddAtomW
GetSystemInfo
SetConsoleActiveScreenBuffer
GetComputerNameW
GetTapeStatus
GetShortPathNameW
QueryDosDeviceA
_hread
SearchPathW
PeekConsoleInputW
GetProfileStringA
SetCommMask
CopyFileExW
GetSystemDirectoryW
SetThreadAffinityMask
lstrcpyA
VirtualLock
EnumResourceLanguagesW
CreateIoCompletionPort
ExpandEnvironmentStringsW

user32

SetWindowPlacement
MessageBoxIndirectW
SetWindowsHookExA
GetMenuStringW
InsertMenuItemA
TrackMouseEvent
LoadMenuIndirectA
GetProcessWindowStation
IsIconic
WinHelpA
SetLastErrorEx
IsDlgButtonChecked
GetUserObjectInformationW
RegisterHotKey
UnhookWinEvent
GetNextDlgTabItem
CreateDialogIndirectParamW
EnumClipboardFormats
CheckDlgButton

shell32

SHGetSpecialFolderPathA
SHLoadInProc
SHFileOperationW
SHBrowseForFolderA

oleaut32

QueryPathOfRegTypeLi
SysAllocStringLen
SafeArrayGetElement
SafeArrayRedim
VariantChangeType
LoadTypeLibEx

msvcrt

setlocale
isalnum
_get_osfhandle
_mbsnicmp
_lseek
_splitpath
towupper
_sopen
_exit
_snprintf
_wctime
strspn
wcstol
_mbscpy
_wfsopen
_errno
strcoll

Sections

.text
Size: 24KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ecc1083dbb320bf48dad2db540962ed

Headers

File Characteristics

Imports

ws2_32

version

kernel32

user32

shell32

oleaut32

msvcrt

Sections

.text Size: 24KB - Virtual size: 240KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 603KB - Virtual size: 602KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 24KB - Virtual size: 240KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 603KB - Virtual size: 602KB

.rsrc
Size: 17KB - Virtual size: 16KB