c17667f60e78d17a5db7b8194522f6c6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c17667f60e78d17a5db7b8194522f6c6_JaffaCakes118
Size

257KB
MD5

c17667f60e78d17a5db7b8194522f6c6
SHA1

019e5a29ee6e3a246a5ddb71fc35df11c3c98183
SHA256

9bd672e0be2569ce8309820f24e2166f6f98059ae0533a05c8787ae27ee6aa2b
SHA512

8ec9c2282c02f361114316cc1deb12c80b925428ed89aff0ab3615cf7ec8651dc0cc795bef63c401025f9e99bf29fd4f00e14bc455b7546f034ae8a042ed9fa4
SSDEEP

6144:ZwKuNorx8FGq99QkbJFsNfoSE4xUEPq6U6:WX2FKKkdFvGxUmqV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c17667f60e78d17a5db7b8194522f6c6_JaffaCakes118

Files

c17667f60e78d17a5db7b8194522f6c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
RegisterClassA
CreateMenu
GetWindowDC
RedrawWindow

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Create

oleaut32

SysReAllocStringLen
VariantChangeType
SysStringLen
SafeArrayGetElement
GetErrorInfo
SysFreeString

kernel32

GetCurrentProcessId
GetFullPathNameA
WriteFile
ExitProcess
RaiseException
GetStdHandle
lstrlenW
EnterCriticalSection
SetHandleCount
GetCurrentProcess
WideCharToMultiByte
LocalAlloc
GetCommandLineW
VirtualAllocEx
GetModuleHandleW
GetUserDefaultLCID
GetTickCount
GetVersion
LoadLibraryA
GetProcessHeap
GetDiskFreeSpaceA
GetSystemDefaultLangID
SetThreadLocale
GetCPInfo
GlobalAlloc
DeleteCriticalSection
WaitForSingleObject
GetThreadLocale
FreeLibrary
LocalReAlloc
GetLastError
GlobalAddAtomA
GetEnvironmentStrings
SizeofResource
GetTempPathA
HeapDestroy
VirtualAlloc
Sleep
DeleteFileA
GetVersionExA
InitializeCriticalSection
GetStartupInfoA
SetEndOfFile
LockResource
IsBadReadPtr
ResetEvent
GetLocalTime
SetErrorMode
HeapAlloc
lstrcmpiA
CreateThread
lstrcmpA
FormatMessageA
GetCurrentThread

Exports

Exports

_XBMLmudpqA2@4
W0_j5Ku@4
_qLtBeS@24
AV3ATS9B@4
G2Jlvhsh@8
_jlc2N@24
0RO_Jv@16
TjADImoU6WlmFj
39cgMwcoMY
_SJevSry
_if4x1l_v
IlCpp1uc
_Ua__x
xy0Yvm8mjqyCx
_1jrwZ
2MrapH
jhkRv
_ElWOaRNkWR@4
_606MEPMK@4
_8SDvr3I7b1g
lAdjH
_A5uAie2Ntb@8
_Cs_0Q6vqxMWh
_Frz9DhEFZruc
s4stEm3GlBC
_XpYdV@8
_VVUoNe8xjT@24
KRSqGW7@4
_Zg_vm
H6DEkeeIQjw5@12
_T33IVWjbB6gX
_H2I0tGiQMTRDSN@12
xKl1SCjNe
_4ZTcby_m9vy
aAs4X
_pXqJX8CkulMx@12
_LA9OPlQLHk6@24
9FLkv9Sgyq4c@12
_2DXCm_
_NR8jZWhIGva
_7RgEDOQ
yIAdu
cRYXqwCXZ49
YyNYUkv_VYE7E
g_gdph
_wGnTo2HCmu@12
_yhRAsr
_T5GiBtx5EOx
_9MIT7b_7S0@20
rGwzc4z7lwB
gXQyjJ_2siF
_1AeLPQWXC4N@8
_wdnwysG_FBqx@8
MlwhCyUY
zTydbQF@16
_ywHsg6ns1e
_MOMqxPcpG_weOt
_Qa1rXl@24
_bNisN0_iWnU2O@12
_6uSFZT
_BUVNGxu79LJT@8
X_eX3d0
svqDI@8
_miTmzjoQ3iRJF
EYdXCVX7@16

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

Imports

user32

comctl32

oleaut32

kernel32

Exports

Exports

Sections

CODE Size: 32KB - Virtual size: 32KB

DATA Size: 11KB - Virtual size: 798KB

.iudata Size: 207KB - Virtual size: 207KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 32KB - Virtual size: 32KB

DATA
Size: 11KB - Virtual size: 798KB

.iudata
Size: 207KB - Virtual size: 207KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB