ef81b11f077754cce92f987849cf565c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef81b11f077754cce92f987849cf565c_JaffaCakes118
Size

438KB
MD5

ef81b11f077754cce92f987849cf565c
SHA1

30031259f9512bccaf82b9fc496b494a11cff9c3
SHA256

763cefd86fced2877b14dfb46cf5f7abe9a67242eff2bd7f5df3ef6c59c0d8a6
SHA512

518da4002f04059e26d47acb28ba8827c0d5a4dc026cd9266daeb591ac002182454c75c9cb6712c683213f955e68190c174200407b36c8238907b8929798608c
SSDEEP

12288:o9MWj55YJFPKWcWYcC514lfzAShb+sSfT/PwE:E2Lc9cC/4qSZiDPwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef81b11f077754cce92f987849cf565c_JaffaCakes118

Files

ef81b11f077754cce92f987849cf565c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c15b474bbfffd1f5915b7f2ca5587f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

DeleteDC
DeleteObject
GetDeviceCaps
BitBlt
CreateSolidBrush
SelectObject
SetBkMode
GetStockObject

user32

GetDC
GetCursorPos
ReleaseDC
SendMessageA
MoveWindow
ScreenToClient
MsgWaitForMultipleObjects
GetKeyState
DestroyWindow
GetMessageA
GetParent
UpdateWindow
DefWindowProcA
ShowWindow
EnableWindow
TranslateMessage
IsWindowEnabled
GetWindow
LoadStringA
IsIconic
DispatchMessageA
GetSubMenu
CreateWindowExA
FillRect
EndPaint
SetFocus
PeekMessageA
BeginPaint
KillTimer
GetSystemMetrics
GetWindowRect
SetCapture
SetWindowLongA
EndDialog
SetWindowTextA
CheckMenuItem
GetWindowLongA
SetTimer
GetDlgItem
ClientToScreen
LoadCursorA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
DestroyMenu
RegisterClassA
GetDesktopWindow
GetSystemMenu
SetForegroundWindow
GetFocus
MessageBoxA
DialogBoxParamA
GetSysColor
PostMessageA
SystemParametersInfoA
EnableMenuItem
IsWindowVisible
InvalidateRect
GetClientRect
CallWindowProcA
SetCursor

kernel32

GetModuleFileNameA
GetPrivateProfileStringA
GetVersionExA
TlsGetValue
MultiByteToWideChar
GetLocalTime
CreateMutexA
GetModuleHandleA
CreateThread
SetUnhandledExceptionFilter
MulDiv
HeapAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleFileNameW
GetEnvironmentVariableA
LoadLibraryExA
CompareStringA
GetSystemTimeAsFileTime
GetConsoleOutputCP
ReleaseMutex
FileTimeToSystemTime
CreateFileMappingA
GetFileAttributesA
WaitForSingleObject
FindNextFileA
HeapDestroy
GetFileAttributesW
GetStdHandle
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetLocaleInfoA
LocalAlloc
lstrcatA
ExpandEnvironmentStringsA
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
GetLocaleInfoW
GetTempPathA
GetCPInfo
GetStringTypeA
WriteFile
SetStdHandle
HeapReAlloc
GetStringTypeW
SetFileAttributesA
GetOEMCP
LocalFree
FormatMessageW
GetExitCodeProcess
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
ExitProcess
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
DeleteFileW
GetSystemDirectoryA
lstrcpyA
FindNextFileW
UnmapViewOfFile
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
GetFullPathNameA
SetEvent
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
CreateEventW
GetConsoleMode
VirtualQuery
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetLastError

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA

oleaut32

VariantInit
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString

msvcrt

_controlfp
_cexit
_exit
exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_strcmpi

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c15b474bbfffd1f5915b7f2ca5587f6

Headers

File Characteristics

Imports

version

gdi32

user32

kernel32

advapi32

oleaut32

msvcrt

Sections

.text Size: 328KB - Virtual size: 328KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 85KB - Virtual size: 84KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 328KB - Virtual size: 328KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 85KB - Virtual size: 84KB

.rsrc
Size: 3KB - Virtual size: 3KB