c2456f20df0b31ebb8cacaef4c4576bd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c2456f20df0b31ebb8cacaef4c4576bd_JaffaCakes118
Size

751KB
MD5

c2456f20df0b31ebb8cacaef4c4576bd
SHA1

5dcf0ac96b8344e7ea97bcd763affba725f06c48
SHA256

4ac60b82d8a8af624bac107acd8d5940325ad46346ac3d986f9c749acbb252b4
SHA512

0e62ad54d4b93595564205c6e56b1b2d03591fc92f8203363c9d406de35d2d36547e8b3bcf96cfcc8d1bdab5f40fe36c0bdc85f028cd2e8337a228f45a9ce316
SSDEEP

12288:b8IbAz6Onx/OENlePxF/aXRK9J1hGVwV02WMhJaXuup4jwKS58esdtI8TuU6VCwF:hbAzRrfeb/5TGVwa2WMm++46ybIqYI0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2456f20df0b31ebb8cacaef4c4576bd_JaffaCakes118

Files

c2456f20df0b31ebb8cacaef4c4576bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7289f96427e6eccf29ace90a47df7ea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetForegroundWindow
DispatchMessageA
GetDC
ReleaseDC
DestroyWindow
GetParent
ShowWindow
EnableWindow
TranslateMessage
LoadStringA
EnableMenuItem
RegisterClassA
GetSubMenu
SetTimer
SetFocus
BeginPaint
KillTimer
GetSystemMetrics
GetWindowRect
ReleaseCapture
SetWindowLongA
SetWindowTextA
GetWindowLongA
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
EndDialog
MoveWindow
MessageBoxA
DialogBoxParamA
SendMessageA
GetClientRect
SetCursor

kernel32

CreateFileA
GetStdHandle
GetFileAttributesA
WaitForSingleObject
LockResource
FindFirstFileW
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
SetFilePointer
WideCharToMultiByte
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
GetStringTypeW
SetEvent
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetEnvironmentVariableA
FlushFileBuffers
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
CreateEventW
GetCurrentThread
GetTickCount
GetCommandLineA
GetCurrentThreadId
GetLastError
GetVersion
GetCurrentProcessId
GetModuleHandleA
ExitProcess
VirtualAlloc
GetOEMCP
Sleep
CreateProcessW
HeapCreate
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
RaiseException
InterlockedCompareExchange
HeapSize
SizeofResource
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
lstrlenA
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
FindNextFileA
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter

Sections

.text
Size: 711KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7289f96427e6eccf29ace90a47df7ea5

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 711KB - Virtual size: 1.0MB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 15KB - Virtual size: 14KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 711KB - Virtual size: 1.0MB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 18KB - Virtual size: 17KB