fb983cb030da17fdd441a5ac147a060e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb983cb030da17fdd441a5ac147a060e_JaffaCakes118
Size

141KB
MD5

fb983cb030da17fdd441a5ac147a060e
SHA1

2526c3120a8319b776e73ba467764544c8f36a61
SHA256

c7cb8c094afe72a699b64ceacf266528fb4858472e6ec797a333789deb603f83
SHA512

e1ab35ed6e6ddf8a334b09d69b067259f08b4a84a47ea56e6861854f54fd0313b9cee88cfacea31bf9e80dc7209c80a57a8dcb3a5a1d90ba580c861fdff19e22
SSDEEP

3072:4SFR0XLH+UoHnRL8YwqahETFobcurQm5Z5bfK:4SF4+RHnRLbT2cuEoZhf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb983cb030da17fdd441a5ac147a060e_JaffaCakes118

Files

fb983cb030da17fdd441a5ac147a060e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentDirectoryA
VirtualAlloc
GetLastError
lstrcpynA
OutputDebugStringA
TerminateThread
LoadLibraryW
GetStartupInfoW
VirtualFree
CreateFiberEx
GetACP
SetEvent
GetConsoleMode
GetModuleFileNameW
SetHandleCount
GetEnvironmentStringsW
GetThreadLocale
GetStdHandle
CloseHandle
GetModuleHandleA
GetCurrentProcess
ExitThread
GlobalAlloc
EndUpdateResourceA
GetProcAddress
lstrcpyW
FreeEnvironmentStringsA
DosDateTimeToFileTime
GetTimeFormatW
VirtualProtect
CreateFiber
FileTimeToSystemTime
GetFileAttributesA

msvcrt

wcstok
atoi
memset
toupper
printf
_wtoi
wcsrchr
wcsncpy
memcpy
strncpy
wcstol
_wcsnicmp
_wcmdln
towupper
_XcptFilter
__CxxFrameHandler
wcscmp
_wcsicmp
swscanf
tmpnam
__setusermatherr

user32

ReleaseDC
RegisterClassA
wsprintfW
GetCursorPos
DestroyWindow
LoadCursorA
DispatchMessageW
SetScrollPos
IsWindow
MapWindowPoints
LoadImageW
SendMessageA
DialogBoxParamA
GetMenuItemCount
CheckDlgButton
GetParent
ClientToScreen
BeginPaint
SendMessageW
GetProcessWindowStation
UnregisterClassW
CopyRect
LoadCursorW
LoadMenuW
SetCapture
ScreenToClient
ReleaseCapture

gdi32

CreateBitmap
CreateFontIndirectW
TranslateCharsetInfo
SetTextColor
CreateCompatibleDC
StretchBlt
SetBkMode
RestoreDC
Rectangle
PatBlt

opengl32

glColor4f
glTexCoord2dv
glFogfv
GlmfBeginGlsBlock
glColor4i
wglShareLists
glColor3ui
glStencilMask
glColor4d
glTexCoord2d

Exports

Exports

VilJlhuQpanqTzh
YaNgetjMbklbzIawgzWns
AeKzzenVyzzq

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.crt Size: 512B - Virtual size: 72B

.rdata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 512B - Virtual size: 262B

.text
Size: 13KB - Virtual size: 13KB

.crt
Size: 512B - Virtual size: 72B

.rdata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 512B - Virtual size: 262B