bfff51115f64303e1b7379da35abf31b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfff51115f64303e1b7379da35abf31b_JaffaCakes118
Size

193KB
MD5

bfff51115f64303e1b7379da35abf31b
SHA1

cd1beec942dd3dc9197316e1d6379c5a806e981b
SHA256

35e8c7b0bcfd9b337b9fc00ec5164afcd5700a158bfb217ac6cfd3031145d9a8
SHA512

e2c6e49ece0e4c919ac0b63a04eca794bc5de7862bd2bebb9e7df91e1f669feb65e06806352b2d6c08f4051e1734b597be5af711f4852c4a1c0cbfe0e4d02f9e
SSDEEP

6144:QppLbB75OT521zgmBpTYbU9LiHMK+UawXvo:qpLbB753gmBlAsUZXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfff51115f64303e1b7379da35abf31b_JaffaCakes118

Files

bfff51115f64303e1b7379da35abf31b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b54f3f6d57768a7c3b8c1d6987463b0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

78LE>CDA>7KC@;IFCB;79BMDH>CE<G8JI8B9J:8KDDGJ;<8G>9B>M=8AB7

Imports

kernel32

GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
DeviceIoControl
WaitForSingleObject
GetCurrentProcess
GetTempPathW
LoadLibraryW
CreateProcessW
Sleep
GetTickCount
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
InterlockedExchange
MoveFileA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapSize
SetFilePointer
VirtualQuery
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
GetTimeFormatA
GlobalLock
GlobalAlloc
GetVersionExW
GlobalFree
QueryPerformanceFrequency
GetLocaleInfoW
MulDiv
FlushInstructionCache
OpenProcess
IsBadReadPtr
GetModuleHandleA
HeapReAlloc
VirtualAlloc
HeapAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStartupInfoA
GetVersionExA
HeapFree
GetLastError
CloseHandle
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetSystemInfo

user32

GetScrollRange
GetDlgItemInt
SetDlgItemInt
FrameRect
WindowFromPoint
SetCapture
GetKeyNameTextW
GetWindowTextW
GetWindowTextLengthW
UpdateWindow
GetFocus
SetFocus
EnumChildWindows
ShowWindow
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

SetBkColor
SelectClipRgn
CreateRectRgn
GetPixel
PtVisible
CreateFontA
CreateCompatibleDC
CreateBitmap
SetTextColor
GetClipBox
GetCharWidthA

ole32

OleInitialize
CLSIDFromString
CoCreateInstance
CoInitialize
CoUninitialize
OleUninitialize

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b54f3f6d57768a7c3b8c1d6987463b0d

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 80KB - Virtual size: 98KB

.rsrc Size: 1024B - Virtual size: 832B

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 80KB - Virtual size: 98KB

.rsrc
Size: 1024B - Virtual size: 832B