fcbbdd5f58084165130bc10aec80a7c9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fcbbdd5f58084165130bc10aec80a7c9_JaffaCakes118
Size

306KB
MD5

fcbbdd5f58084165130bc10aec80a7c9
SHA1

ae048ba242cba3f2dd0b6ffb5b013cf57f470e8e
SHA256

3f3f915006b2f098efa1bee6bd5cff0ba1e76ebf51eb10d931602ad7e729284c
SHA512

5d259ca94fc995d58be306e151d229982171f6a38024567776d04265330dda05017995b05bc427cbb00d9333742f2f7aaaa2e6e345078690c2c0411c22f12a1f
SSDEEP

6144:k3c3LNNyD5sx2MJFu2BDRbHOyrMK3xUMU7tMoXGKYhf85nvojriBD5Z:A0xNy1MJFumzHMYUMU7fWLhkvSmBFZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcbbdd5f58084165130bc10aec80a7c9_JaffaCakes118

Files

fcbbdd5f58084165130bc10aec80a7c9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef508c6f038a3ba517ca329b7fa4e24a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetVersionExW
lstrcpynA
lstrlenA
lstrcpynW
FlushInstructionCache
GetCurrentProcess
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
SizeofResource
LoadLibraryExW
GetModuleFileNameW
GetCommandLineW
VirtualAlloc
VirtualFree
LCMapStringW
CloseHandle
GetStringTypeW
GetStringTypeA
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
Sleep
HeapSize
HeapReAlloc
OpenMutexW
lstrcmpiW
LCMapStringA
InterlockedDecrement
GetLastError
lstrlenW
RaiseException
GetModuleHandleW
LoadLibraryW
GetProcAddress
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
WriteFile
GetStdHandle

user32

DefWindowProcW
CharNextW
DestroyWindow
TranslateAcceleratorW
GetWindowRect
InvalidateRect
SendMessageW
CreateWindowExW
PeekMessageW
PtInRect
IsWindow
MessageBeep
TrackPopupMenuEx
SetWindowPos
CallWindowProcW
LoadStringA
PostQuitMessage
SetFocus
LoadStringW
SetMenuDefaultItem
SetMenuItemInfoW
ShowWindow
MapWindowPoints
GetClientRect
PostMessageW
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
GetMenuItemInfoW
RemoveMenu
GetMenuItemCount
AppendMenuW
DestroyMenu
CreatePopupMenu
GetWindowLongW
UnregisterClassA

gdi32

GetObjectW
GetStockObject

advapi32

RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

comctl32

ImageList_LoadImageW
InitCommonControlsEx

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef508c6f038a3ba517ca329b7fa4e24a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 213KB - Virtual size: 212KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 213KB - Virtual size: 212KB