bec5ded1dc23cefa5938dccaa276fb9f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bec5ded1dc23cefa5938dccaa276fb9f_JaffaCakes118
Size

233KB
MD5

bec5ded1dc23cefa5938dccaa276fb9f
SHA1

3899616624ed9c57b868a03fe45448df68a2140c
SHA256

dca7e05a4837320ca4292928f62fb94a62ab81c5b277dd05683343e27a6c6200
SHA512

ad6417e88f99dad9c1077123579abac9a1b94c48c3d6561174e8289074db81323a3164835439d9671592a8f1398dbeca3a0f7b764d69afdb6fe36a6d781ad3bd
SSDEEP

6144:8/qowoBMm6+5qTqQhy5JTaUc/Y8KKTYel/tIbxgA9:8/q1SMIwjhgJmY8KKTntIb6A9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec5ded1dc23cefa5938dccaa276fb9f_JaffaCakes118

Files

bec5ded1dc23cefa5938dccaa276fb9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83e5176c873a5ca25265e62924f03399

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetVolumeInformationA
LoadLibraryA
SetLocaleInfoA
GetFileAttributesW
EnumCalendarInfoA
DosDateTimeToFileTime
GetExpandedNameW
GetStartupInfoA
GetProcAddress
GlobalGetAtomNameA
ReplaceFileW
HeapCreate
GetACP
LoadLibraryExA
MoveFileW
SleepEx
AddAtomA
GetEnvironmentVariableA
GetCurrentThreadId
GetThreadPriority
FatalAppExitA
GetMailslotInfo
OpenSemaphoreW
OpenEventA
GetUserDefaultLangID
GlobalFindAtomW
EnumCalendarInfoW
lstrlenA
QueryPerformanceFrequency
lstrcmpW
GetStartupInfoW
lstrlen
GetShortPathNameA
lstrcatA
CreateEventA
AddAtomW
OpenFile
SetCurrentDirectoryW
BeginUpdateResourceW
GetCurrentDirectoryW
GetStringTypeA
LocalAlloc
CreateMutexA

user32

PeekMessageW
InsertMenuA
GetClassInfoA
MessageBoxIndirectA
GetSysColorBrush
PostMessageW
GetMessageW
InsertMenuItemW
OffsetRect
DefWindowProcW
SendDlgItemMessageW
GetForegroundWindow
EnumWindows
LoadImageA
SetDlgItemInt
DialogBoxIndirectParamA
GetIconInfo
PostQuitMessage
CharUpperW
CreateDialogParamW
GetSystemMetrics
CreateMenu

gdi32

CreateFontIndirectW
CreateDIBPatternBrushPt
RemoveFontResourceW
CreatePolygonRgn
GetRasterizerCaps
AddFontResourceW
CreateRectRgn
CreateEllipticRgn
CreateFontW
CreateFontIndirectExW
AddFontResourceA
StretchDIBits
CreateCompatibleDC

shell32

ShellExecuteExA
SHCreateDirectoryExW
StrCmpNW
StrCmpNIW
SHGetDiskFreeSpaceExA
ExtractIconExA
StrNCmpW

ole32

OleUninitialize
OleInitialize
CoGetMalloc
CoDosDateTimeToFileTime
CoGetObject
CoGetCallerTID
CoDeactivateObject
CLSIDFromString
CLSIDFromProgID
CoFileTimeNow

wininet

InternetOpenW
InternetSetDialStateW

oledlg

OleUICanConvertOrActivateAs
OleUIConvertW
OleUIPasteSpecialW
OleUIObjectPropertiesA
OleUIBusyW
OleUIUpdateLinksW
OleUIInsertObjectA
OleUIChangeSourceA

Sections

.o
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Aq
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JZ
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.peir
Size: 2KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jLps
Size: 3KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mk
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ShW
Size: 13KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ifSj
Size: 5KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83e5176c873a5ca25265e62924f03399

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

wininet

oledlg

Sections

.o Size: 2KB - Virtual size: 2KB

.Aq Size: 3KB - Virtual size: 36KB

.JZ Size: 83KB - Virtual size: 83KB

.peir Size: 2KB - Virtual size: 334KB

.a Size: 13KB - Virtual size: 13KB

.jLps Size: 3KB - Virtual size: 43KB

.mk Size: 82KB - Virtual size: 82KB

.ShW Size: 13KB - Virtual size: 325KB

.ifSj Size: 5KB - Virtual size: 422KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 1024B

.o
Size: 2KB - Virtual size: 2KB

.Aq
Size: 3KB - Virtual size: 36KB

.JZ
Size: 83KB - Virtual size: 83KB

.peir
Size: 2KB - Virtual size: 334KB

.a
Size: 13KB - Virtual size: 13KB

.jLps
Size: 3KB - Virtual size: 43KB

.mk
Size: 82KB - Virtual size: 82KB

.ShW
Size: 13KB - Virtual size: 325KB

.ifSj
Size: 5KB - Virtual size: 422KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 1024B