efd882405e082ed30dd9e54c86ebef49_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

efd882405e082ed30dd9e54c86ebef49_JaffaCakes118
Size

505KB
MD5

efd882405e082ed30dd9e54c86ebef49
SHA1

2601569f1d853613304772235534b5d7522eaeb8
SHA256

11e4d88bec5aee322ab5cb85a1868d3c831773555f42fa6926ddbe56c67cc13b
SHA512

3b5a8e6db93089518b6c7f82161888ec98720eebb72ea1ddd8a984235f5d3f68297d0bbd33f5896ec8726a52b072a5dad2069f14737bc748b9c723932c9b81d5
SSDEEP

12288:MIEkxXsnr7tbZFDV3t3VjaLsjafvqILBOc/EUPNPhtson17t:MIkhpt1aLsKvqOwc/Eoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efd882405e082ed30dd9e54c86ebef49_JaffaCakes118

Files

efd882405e082ed30dd9e54c86ebef49_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc6bca2d76665b2fcb6a808ac81f0328

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
TlsGetValue
OpenConsoleW
ConsoleMenuControl
IsBadWritePtr
GetSystemDirectoryW
EraseTape
GlobalUnWire
CreateTimerQueue
SetConsoleActiveScreenBuffer
FatalAppExitA
GlobalAddAtomW
SetupComm
GetConsoleKeyboardLayoutNameW
GetBinaryTypeW
Beep
PrepareTape
GetStringTypeW
GetQueuedCompletionStatus
IsValidLanguageGroup
GetWindowsDirectoryA
OpenSemaphoreA
EnumDateFormatsW
_hwrite
lstrcmp
RegisterWaitForSingleObjectEx
GetStringTypeA
GetNamedPipeInfo
GetConsoleScreenBufferInfo
GetConsoleMode
CreateJobObjectA
FileTimeToLocalFileTime
SetVolumeLabelA
BindIoCompletionCallback
InitializeCriticalSection
GetCompressedFileSizeA
SetConsoleInputExeNameA
IsBadHugeReadPtr
WriteProfileSectionW
VirtualProtect
HeapFree
Module32Next
GetNumberOfConsoleFonts
WriteConsoleA
GlobalUnlock
GetPrivateProfileSectionA
OpenFileMappingA
FindFirstVolumeMountPointA
SetErrorMode
GetPrivateProfileSectionW
NlsGetCacheUpdateCount
ResetWriteWatch
PrivMoveFileIdentityW
ReadConsoleInputA
FindFirstChangeNotificationW
RegisterConsoleOS2
GetUserDefaultLangID
SetFileApisToANSI

gdi32

Rectangle
RoundRect
CreateBitmapIndirect
PatBlt
MoveToEx
BitBlt
Rectangle
GetWindowOrgEx
CreateFontA
GetBrushOrgEx
BitBlt
MoveToEx
CreateBitmap
SetWindowOrgEx
StretchBlt
GetPixel
CombineRgn
CreatePen
CreateFontIndirectA
CreateBitmapIndirect
GetCurrentObject
CreateDIBSection
MoveToEx
GetPixel
Polygon
CreateSolidBrush
SetBkColor
SetWindowExtEx
Polygon
GetWindowOrgEx
CreateCompatibleDC
SelectObject
Rectangle
CreateBitmap
GetBrushOrgEx
GetPixel
RoundRect
GetWindowOrgEx
SetBkColor
GetWindowExtEx
CreateFontA
CreateFontA
SetBkMode
RoundRect
GetBrushOrgEx
CreateDIBSection
StretchBlt
Polygon
CreateBitmap
RoundRect
SetBkColor
CreateCompatibleDC
StretchBlt
GetWindowOrgEx
GetWindowExtEx
BitBlt

Sections

.text
Size: 499KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc6bca2d76665b2fcb6a808ac81f0328

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 499KB - Virtual size: 964KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 499KB - Virtual size: 964KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB