cfc85a603f641953a57f17b9a91e061a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cfc85a603f641953a57f17b9a91e061a_JaffaCakes118
Size

333KB
MD5

cfc85a603f641953a57f17b9a91e061a
SHA1

e9a43e95075e8326e0f0c18a87d61b2b2a4600f7
SHA256

43a40248ae56d4f38d7687e30954b8b30002207feb799c5fd81cfc4788458497
SHA512

c3c1cc543fbfc8f66cef4ed4565e50566cc9ebac4670086937cb19c181d0d20c19fe2920c1a12124373ed04a7837866e8316a4c10e7cc4cfb77f6a52e59ecc8d
SSDEEP

6144:RpjzgOrlcvGFZXAOzGxk0RasfT2tcMhkvvcKKqAoCrixed:RpjztE6C4mTftvvm9rik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc85a603f641953a57f17b9a91e061a_JaffaCakes118

Files

cfc85a603f641953a57f17b9a91e061a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e7b28c6c5c1f4f5fb942d944a365ce7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileShortNameA
SetCommBreak
SetMailslotInfo
MapViewOfFile
FlushViewOfFile
FlushFileBuffers
GetModuleFileNameW
GetTempPathA
GetDefaultCommConfigW
SetConsoleMode
GetConsoleCP
SetThreadContext
SetLastError
VirtualProtect
LoadLibraryA
LocalAlloc
WriteConsoleW
SetFilePointerEx
GetConsoleMode
HeapSize
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
CreateFileW

gdi32

StretchBlt
ResetDCA
CloseMetaFile
PathToRegion

ole32

CoCancelCall

msimg32

AlphaBlend

msvcr120

??8type_info@@QEBA_NAEBV0@@Z

mfc42u

ord657

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ksn:_>
Size: 512B - Virtual size: 32B

.textkOY
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textkOY
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e7b28c6c5c1f4f5fb942d944a365ce7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

ole32

msimg32

msvcr120

mfc42u

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 5KB - Virtual size: 9.9MB

.gfids Size: 512B - Virtual size: 392B

.rsrc Size: 131KB - Virtual size: 130KB

.reloc Size: 8KB - Virtual size: 8KB

.data2 Size: 4KB - Virtual size: 4KB

.l1 Size: 4KB - Virtual size: 4KB

ksn:_> Size: 512B - Virtual size: 32B

.textkOY Size: 512B - Virtual size: 6B

.textkOY Size: 512B - Virtual size: 6B

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 5KB - Virtual size: 9.9MB

.gfids
Size: 512B - Virtual size: 392B

.rsrc
Size: 131KB - Virtual size: 130KB

.reloc
Size: 8KB - Virtual size: 8KB

.data2
Size: 4KB - Virtual size: 4KB

.l1
Size: 4KB - Virtual size: 4KB

ksn:_>
Size: 512B - Virtual size: 32B

.textkOY
Size: 512B - Virtual size: 6B

.textkOY
Size: 512B - Virtual size: 6B