ef1473a938018debbc2d8293550ef6c7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ef1473a938018debbc2d8293550ef6c7_JaffaCakes118
Size

2.9MB
MD5

ef1473a938018debbc2d8293550ef6c7
SHA1

1e37bb7d1098e9e976a1f5661c0dc3e84873ecfb
SHA256

f2e290c0c8eed24eb5d26151384231ef5fe9e71b49baddd853c2693152ee835c
SHA512

0055c0e115d0e80d723e934344f654de16369b8d4e05e027d87083f04fe1b7c2a3f024434c6c61a97ddb5ca47e6c70507e64e27dff2ce487afefadc7c799958d
SSDEEP

24576:kn467nyyhMGPmLNUYxiZYCE+tDB+AwRRrrxKFOZwlihkrMZy:knDXmLNUQKVXtDw9RXOliOyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1473a938018debbc2d8293550ef6c7_JaffaCakes118

Files

ef1473a938018debbc2d8293550ef6c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

177dbd94236e254c62cd98ff13c0cd17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeDisconnect
CreateIconFromResourceEx
LoadCursorW
GetSysColorBrush
GetCaretPos
GetWindowTextLengthW
GetScrollPos
GetWindowRgnBox
UpdateWindow
TrackPopupMenu
CheckMenuItem
GetMenu
IsWindowEnabled
SetCapture
GetLastInputInfo
CheckDlgButton
DialogBoxParamW
EndDeferWindowPos
DestroyWindow
RegisterClassExW
DrawEdge
RegisterWindowMessageW

psapi

GetDeviceDriverBaseNameW
GetModuleBaseNameW

kernel32

GetProcAddress
EnterCriticalSection
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
HeapFree
VirtualAlloc
GetWriteWatch
CloseHandle
GetSystemTime
CreateMailslotW
lstrcmpiW
CreateMutexW
OpenMutexW
CreateEventW
LoadLibraryExW
GetModuleHandleW
GetStartupInfoW
FindResourceExW
CreateDirectoryW
CreateFileW
GetFileAttributesW
FindFirstFileW
GetACP
GetOEMCP
CompareStringW
EnumLanguageGroupLocalesW
GetConsoleWindow
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection

mpr

WNetEnumResourceW

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 981KB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

177dbd94236e254c62cd98ff13c0cd17

Headers

File Characteristics

Imports

user32

psapi

kernel32

mpr

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 981KB - Virtual size: 7.4MB

.rsrc Size: 375KB - Virtual size: 375KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 981KB - Virtual size: 7.4MB

.rsrc
Size: 375KB - Virtual size: 375KB