d51b72ee9e22978d66d9c80ee613aa8c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d51b72ee9e22978d66d9c80ee613aa8c_JaffaCakes118
Size

217KB
MD5

d51b72ee9e22978d66d9c80ee613aa8c
SHA1

49c4ca3fa9f99990a774c4a939e9047676c76b82
SHA256

428817003b8715c76c2f50a0a45f799b04bd08aa98afdda106f8d22eafd9b516
SHA512

0d9e8b6c6283d0176041781147776c9ba4123cb1495855509a591218655ad07a465dbafcbb775ae8a7494824090e08a4e7d0cb66f7540db1134b1ffc10ec1d9c
SSDEEP

3072:u9PkrQ3qKG12Aa+u5/GGrgQ2TrhzWiQmzV50qAnz4Wa2vLsNouaiUZO:OAv7yXg5zWiNzV50XwaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d51b72ee9e22978d66d9c80ee613aa8c_JaffaCakes118

Files

d51b72ee9e22978d66d9c80ee613aa8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0e8d18bdc7cd53622a4450a345fc71f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
lstrcatW
GetModuleHandleA
SetEvent
SetLocaleInfoW
GetCommandLineA
GetCalendarInfoA
AddAtomA
GetSystemInfo
GetNamedPipeInfo
GetProcAddress
GetAtomNameA
ConnectNamedPipe
GetWindowsDirectoryW
FlushFileBuffers
CreateFileMappingA
GetVersionExA
GlobalDeleteAtom
CompareFileTime
GetCurrentThreadId
GetStartupInfoW
EndUpdateResourceA
CreateEventW
CreateEventA
GetThreadPriority
RaiseException
GetStartupInfoA
SetCurrentDirectoryW

user32

CreateDesktopW
wvsprintfA
InvalidateRgn
FillRect
GetWindowTextW
SetFocus
GetWindowLongA
GetKeyState
GetWindowLongW
CreateAcceleratorTableA
LoadMenuW
GetMenuStringA
LoadCursorA
GetClassLongW
InsertMenuA
CreateWindowExW
MonitorFromRect
GetMenuItemInfoW
GetMenuItemRect
SetTimer
CreateDesktopA
GetSubMenu
GetClientRect
CreateWindowExA
AppendMenuA
GetClassInfoExA
GetWindowTextA
EnumDesktopsW
CreateMenu
OffsetRect
MessageBoxIndirectA
GetDlgItemTextW
LoadIconA
CloseWindow
BringWindowToTop
DeleteMenu

gdi32

GetCurrentObject
SelectPalette
CreateDCA
GetDeviceCaps
SetTextCharacterExtra
GetViewportExtEx
GetViewportOrgEx
SetBitmapDimensionEx
GetStretchBltMode
GetEnhMetaFileW
EnumICMProfilesA
EnumICMProfilesW
CreateEllipticRgn

advapi32

RegReplaceKeyW
RegOpenKeyA
RegQueryValueA
RegEnumValueW

shell32

SHGetFileInfoA

shlwapi

StrNCatA
StrCSpnW
SHRegSetPathW
SHRegDeleteUSValueW
SHSetValueW
SHDeleteOrphanKeyA

urlmon

FindMediaType
CreateAsyncBindCtxEx
HlinkNavigateMoniker
FindMediaTypeClass

winmm

midiOutReset
waveInGetErrorTextW
midiInMessage

winspool.drv

StartDocPrinterW

oledlg

OleUICanConvertOrActivateAs
OleUIUpdateLinksW
OleUIChangeSourceW
OleUIChangeIconA
OleUIChangeIconW

Sections

.jYaR
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.S
Size: 2KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.otzqc
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NF
Size: 3KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KWhBLJ
Size: 4KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IpvXT
Size: 2KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gr
Size: 1KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msK
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FSBjwB
Size: 1024B - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ph
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HyH
Size: 1KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z
Size: 2KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wW
Size: 4KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0e8d18bdc7cd53622a4450a345fc71f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

urlmon

winmm

winspool.drv

oledlg

Sections

.jYaR Size: 11KB - Virtual size: 11KB

.S Size: 2KB - Virtual size: 401KB

.otzqc Size: 3KB - Virtual size: 26KB

.NF Size: 3KB - Virtual size: 389KB

.KWhBLJ Size: 4KB - Virtual size: 324KB

.IpvXT Size: 2KB - Virtual size: 201KB

.gr Size: 1KB - Virtual size: 470KB

.msK Size: 1KB - Virtual size: 440KB

.FSBjwB Size: 1024B - Virtual size: 423KB

.Ph Size: 8KB - Virtual size: 8KB

.HyH Size: 1KB - Virtual size: 347KB

.z Size: 2KB - Virtual size: 238KB

.wW Size: 4KB - Virtual size: 315KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1024B - Virtual size: 942B

.jYaR
Size: 11KB - Virtual size: 11KB

.S
Size: 2KB - Virtual size: 401KB

.otzqc
Size: 3KB - Virtual size: 26KB

.NF
Size: 3KB - Virtual size: 389KB

.KWhBLJ
Size: 4KB - Virtual size: 324KB

.IpvXT
Size: 2KB - Virtual size: 201KB

.gr
Size: 1KB - Virtual size: 470KB

.msK
Size: 1KB - Virtual size: 440KB

.FSBjwB
Size: 1024B - Virtual size: 423KB

.Ph
Size: 8KB - Virtual size: 8KB

.HyH
Size: 1KB - Virtual size: 347KB

.z
Size: 2KB - Virtual size: 238KB

.wW
Size: 4KB - Virtual size: 315KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1024B - Virtual size: 942B